T1127.003 JamPlus

Unter-TechnikEnterprise

Adversaries may use `JamPlus` to proxy the execution of a malicious script. `JamPlus` is a build utility tool for code and data build systems. It works with several popular compilers and can be used for generating workspaces in code editors such as Visual Studio. Adversaries may abuse the `JamPlus` build utility to execute malicious scripts via a `.jam` file, which describes the build process and required dependencies. Because the malicious script is executed from a reputable developer tool, it may subvert application control security systems such as Smart App Control.

01

Plattformen

Plattformen, für die dies gilt.

Windows
02

Taktiken

ATT&CK-Taktiken, denen diese Technik dient.

03

Unter-Technik von

Die übergeordnete Entität.

04

Gegenmaßnahmen

ATT&CK-Gegenmaßnahmen, die dies verringern.

06

Quelle

Wo diese Definition veröffentlicht ist.