Isolatesubtechnique
D3-CNRContent Rebuild
Definition
Rebuild the file according to the spec so any unreferenced components or objects are removed.
Defends against99
| Type | Target | Confidence | Tier |
|---|---|---|---|
| SubTechnique | Invalid Code Signaturet1036.001 | 100% | live |
| SubTechnique | Thread Execution Hijackingt1055.003 | 100% | live |
| SubTechnique | Logon Script (Windows)t1037.001 | 100% | live |
| SubTechnique | Systemd Servicet1543.002 | 100% | live |
| SubTechnique | LC_LOAD_DYLIB Additiont1546.006 | 100% | live |
| SubTechnique | AppInit DLLst1546.010 | 100% | live |
| SubTechnique | Network Logon Scriptt1037.003 | 100% | live |
| SubTechnique | Spearphishing Linkt1566.002 | 100% | live |
| Technique | Exfiltration Over C2 Channelt1041 | 100% | live |
| Technique | File and Directory Discoveryt1083 | 100% | live |
| Technique | Command and Scripting Interpretert1059 | 100% | live |
| SubTechnique | Archive via Utilityt1560.001 | 100% | live |
| SubTechnique | Space after Filenamet1036.006 | 100% | live |
| SubTechnique | Registry Run Keys / Startup Foldert1547.001 | 100% | live |
| SubTechnique | Archive via Libraryt1560.002 | 100% | live |
| SubTechnique | Web Protocolst1071.001 | 100% | live |
| SubTechnique | Accessibility Featurest1546.008 | 100% | live |
| SubTechnique | Path Interception by Unquoted Patht1574.009 | 100% | live |
| Technique | Credentials from Password Storest1555 | 100% | live |
| SubTechnique | Launch Daemont1543.004 | 100% | live |
| SubTechnique | Hidden Userst1564.002 | 100% | live |
| SubTechnique | Rundll32t1218.011 | 100% | live |
| Technique | Internal Spearphishingt1534 | 100% | live |
| SubTechnique | LSASS Drivert1547.008 | 100% | live |
| SubTechnique | Pluggable Authentication Modulest1556.003 | 100% | live |
| Technique | Deobfuscate/Decode Files or Informationt1140 | 100% | live |
| SubTechnique | Path Interception by Search Order Hijackingt1574.008 | 100% | live |
| SubTechnique | Dynamic Linker Hijackingt1574.006 | 100% | live |
| Technique | Forced Authenticationt1187 | 100% | live |
| SubTechnique | Asymmetric Cryptographyt1573.002 | 100% | live |
Showing top 30 of 99 by confidence. Click any target to see the full neighbourhood.
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.