ATT&CK technique
View on MITRE ATT&CK →
T1598.002
Spearphishing Attachment
Reconnaissance
2 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows RDP File Execution | production | 2026-05-13 |
| sigma | HTML File Opened From Download Folder | experimental | 2025-12-05 |