ATT&CK technique
View on MITRE ATT&CK →
T1608
Stage Capabilities
Resource Development
12 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | M365 SharePoint Malware File Detected | production | 2026-09-18 |
| elastic | AWS SES Full Access Policy Attached to IAM Entity by Unusual User | production | 2026-09-18 |
| elastic | AWS SES Account Email Sending Enabled | production | 2026-09-18 |
| elastic | AWS SNS Topic Created by Rare User | production | 2026-09-18 |
| elastic | Azure Automation Webhook Created | production | 2026-09-18 |
| elastic | M365 OneDrive Malware File Upload | production | 2026-09-18 |
| splunk | Linux Suspicious GCC Invocation Building Init Shared Object | production | 2026-07-08 |
| splunk | Windows Cobalt Strike PowerShell Loader | production | 2026-05-13 |
| splunk | Windows Metasploit Confluence Plugin Execution | production | 2026-05-13 |
| splunk | Windows NorthStar C2 Agent Execution | production | 2026-05-13 |
| sigma | HybridConnectionManager Service Installation - Registry | test | 2022-11-27 |
| sigma | Suspicious Download from Office Domain | test | 2022-08-02 |