ATT&CK technique
View on MITRE ATT&CK →
T1036.008
Masquerade File Type
Stealth
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Process Started from Process ID (PID) File | production | 2026-09-18 |
| splunk | Suspicious Process Executed From Container File | production | 2026-07-09 |
| splunk | Email Attachments With Lots Of Spaces | experimental | 2026-05-13 |
| splunk | Windows Executable Masquerading as Benign File Types | production | 2026-05-13 |
| sigma | Non-DLL Extension File Renamed With DLL Extension | test | 2023-11-11 |