MITRE ATT&CKsoftware (tool)

S0358 Ruler

Published 2019-02-04 Modified 2025-04-25 Official page ↗

Domain: enterprise
Platforms: Windows, Office Suite
Version: 1.1
Created: 2019-02-04

Description

Ruler is a tool to abuse Microsoft Exchange services. It is publicly available on GitHub and the tool is executed via the command line. The creators of Ruler have also released a defensive tool, NotRuler, to detect its usage.

Uses · MITRE ATT&CK (4)

T1087.003 Email Account sub-technique
T1137.003 Outlook Forms sub-technique
T1137.004 Outlook Home Page sub-technique
T1137.005 Outlook Rules sub-technique

Referenced by MITRE ATT&CK · uses (1)

G0064 APT33 group

References

https://github.com/sensepost/ruler SensePost Ruler GitHub
https://github.com/sensepost/notruler SensePost NotRuler

S0358 Ruler

Description

Related

Uses · MITRE ATT&CK (4)

Referenced by MITRE ATT&CK · uses (1)

References