ATT&CK technique
View on MITRE ATT&CK →
T1132.001
Standard Encoding
Command and Control
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | HTTP POST Request with Encoded Payload | production | 2026-10-19 |
| elastic | Base16 or Base32 Encoding/Decoding Activity | production | 2026-09-18 |
| sigma | Gzip Archive Decode Via PowerShell | test | 2023-03-13 |
| sigma | Suspicious FromBase64String Usage On Gzip Archive - Ps Script | test | 2022-12-23 |
| sigma | Suspicious FromBase64String Usage On Gzip Archive - Process Creation | test | 2022-12-23 |
| sigma | DNS Exfiltration and Tunneling Tools Execution | test | 2021-11-27 |