ATT&CK technique
View on MITRE ATT&CK →
T1027.015
Compression
Stealth
2 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Suspicious Content Extracted or Decompressed via Funzip | production | 2026-10-09 |
| elastic | PowerShell Suspicious Payload Encoded and Compressed | production | 2026-09-18 |