ATT&CK technique
View on MITRE ATT&CK →
T1070.006
Timestomp
Stealth
10 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Timestomping using Touch Command | production | 2026-10-05 |
| elastic | Potential Timestomp in Executable Files | production | 2026-09-18 |
| elastic | ESXI Timestomping using Touch Command | production | 2026-09-18 |
| splunk | ESXi System Clock Manipulation | production | 2026-05-13 |
| sigma | File Creation Date Changed to Another Year | test | 2026-01-20 |
| sigma | Unauthorized System Time Modification | test | 2025-12-03 |
| sigma | Touch Suspicious Service File | test | 2023-01-11 |
| sigma | Powershell Timestomp | test | 2022-12-25 |
| sigma | File Time Attribute Change - Linux | test | 2022-11-28 |
| sigma | File Time Attribute Change | test | 2022-01-12 |