ATT&CK technique
View on MITRE ATT&CK →
T1553.002
Code Signing
Defense Impairment
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Windows CryptoAPI Spoofing Vulnerability (CVE-2020-0601 - CurveBall) | production | 2026-09-18 |
| elastic | Potential Masquerading as System32 DLL | production | 2026-09-18 |
| elastic | Expired or Revoked Driver Loaded | production | 2026-09-18 |
| sigma | Potential Secure Deletion with SDelete | test | 2024-12-13 |