MITRE ATT&CKtactic

TA0103 Evasion

Published 2018-10-17 Modified 2025-04-25 Official page ↗
Domain
ics
Version
1.0
Created
2018-10-17

Description

The adversary is trying to avoid security defenses. Evasion consists of techniques that adversaries use to avoid technical defenses throughout their campaign. Techniques used for evasion include removal of indicators of compromise, spoofing communications, and exploiting software vulnerabilities. Adversaries may also leverage and abuse trusted devices and processes to hide their activity, possibly by masquerading as master devices or native software. Methods of defense evasion for this purpose are often more passive in nature.

Related

Referenced by MITRE ATT&CK · tactic (9)

  • T1692 Unauthorized Message technique
  • T1692.001 Command Message sub-technique
  • T1692.002 Reporting Message sub-technique
  • T0894 System Binary Proxy Execution technique
  • T0820 Exploitation for Evasion technique
  • T0849 Masquerading technique
  • T0851 Rootkit technique
  • T0858 Change Operating Mode technique
  • T0872 Indicator Removal on Host technique