Free scan↗
  • English
  • Deutsch

DC0034 Process Metadata

Contextual data about a running process, which may include information such as environment variables, image name, user/owner, etc.

01

detects techniques (39)

ATT&CK techniques this enables or maps to.

  • T0849Masquerading
  • T0860Wireless Compromise
  • T0874Hooking
  • T0887Wireless Sniffing
  • T0890Exploitation for Privilege Escalation
  • T1001.003Protocol or Service Impersonation
  • T1003OS Credential Dumping
  • T1027.014Polymorphic Code
  • T1036Masquerading
  • T1036.003Rename Legitimate Utilities
  • T1036.005Match Legitimate Resource Name or Location
  • T1036.011Overwrite Process Arguments
  • T1055Process Injection
  • T1055.008Ptrace System Calls
  • T1056Input Capture
  • T1056.001Keylogging
  • T1057Process Discovery
  • T1059.001PowerShell
  • T1124System Time Discovery
  • T1125Video Capture
showing 20 of 39
02

source

Where this definition is published.

view on ATT&CK↗
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…