ATT&CK technique
View on MITRE ATT&CK →
T1204.003
Malicious Image
Execution
10 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | ASL AWS ECR Container Upload Outside Business Hours | production | 2026-05-13 |
| splunk | AWS ECR Container Scanning Findings High | production | 2026-05-13 |
| splunk | AWS ECR Container Scanning Findings Low Informational Unknown | production | 2026-05-13 |
| splunk | AWS ECR Container Scanning Findings Medium | production | 2026-05-13 |
| splunk | AWS ECR Container Upload Outside Business Hours | production | 2026-05-13 |
| splunk | AWS ECR Container Upload Unknown User | production | 2026-05-13 |
| splunk | Risk Rule for Dev Sec Ops by Repository | production | 2026-05-13 |
| splunk | Cisco Isovalent - Non Allowlisted Image Use | production | 2026-05-13 |
| splunk | Cisco Isovalent - Pods Running Offensive Tools | production | 2026-05-13 |
| splunk | ASL AWS ECR Container Upload Unknown User | production | 2026-05-13 |