Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1553.006

Code Signing Policy Modification

Defense Impairment 4 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic ESXi Attempt to Force Install a VMware VIB Package production 2026-09-30
elastic ESXi Host Prepared for an Unsigned Install production 2026-09-30
elastic Code Signing Policy Modification Through Built-in tools production 2026-09-18
elastic Code Signing Policy Modification Through Registry production 2026-09-18