D3FEND 技术详情
D3-USICA
定义
Analyzing modifications to user session config files such as .bashrc or .bash_profile.
父技术
子技术
无
关联构件
UserInitConfigurationFile
User Init Configuration File
A user initialization configuration file is a file containing the information necessary to configure that part of a user's environment which is common to all applications and actions. User configurations may be overridden by more specific configuration information (such as that found in a application configuration file.)
语义关系
出向analyzesUser Init Configuration File
出向kb referenceReference - CAR-2020-09-002: Component Object Model Hijacking - MITRE
出向kb referenceReference - CAR-2020-11-011: Registry Edit from Screensaver
出向kb referenceReference - Identification and extraction of key forensics indicators of compromise using subject-specific filesystem views
出向kb referenceReference - Registry Key Security and Access Rights