MITRE D3FENDdefensive technique
D3-USICA User Session Init Config Analysis
- Tactic
- Detect
- Synonyms
- User Startup Config Analysis
Definition
Analyzing modifications to user session config files such as .bashrc or .bash_profile.
Related
Counters · MITRE ATT&CK (4)
Child of · MITRE D3FEND (1)
- D3-OSM Operating System Monitoring defensive technique
References
- https://car.mitre.org/analytics/CAR-2020-09-002/ CAR-2020-09-002: Component Object Model Hijacking
- https://car.mitre.org/analytics/CAR-2020-11-011/ CAR-2020-11-011: Registry Edit from Screensaver
- https://patents.google.com/patent/US20200004962A1/en Identification and extraction of key forensics indicators of compromise using subject-specific filesystem views
- https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry-key-security-and-access-rights Registry Key Security and Access Rights