ATT&CK technique
View on MITRE ATT&CK →
T1195.001
Compromise Software Dependencies and Development Tools
Initial Access
10 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Package Runtime Secret File Access Followed by IMDS Request | production | 2026-10-23 |
| elastic | Node.js Pre or Post-Install Script Execution | production | 2026-09-25 |
| elastic | Network Connection to OAST Domain via Script Interpreter | production | 2026-09-23 |
| elastic | Curl Download Activity from npm Package Install | production | 2026-09-23 |
| elastic | Suspicious PowerShell from npm Package Install | production | 2026-09-22 |
| elastic | New GitHub Self Hosted Action Runner | production | 2026-09-18 |
| elastic | Tampering with RUNNER_TRACKING_ID in GitHub Actions Runners | production | 2026-09-18 |
| elastic | GitHub Actions Workflow Modification Blocked | production | 2026-09-18 |
| sigma | Outdated Dependency Or Vulnerability Alert Disabled | test | 2023-01-27 |
| sigma | Octopus Scanner Malware | test | 2021-11-27 |