Why so, ISO? Mark-of-the-Web, explained - Red Canary
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Mark-Of-The-Web Bypass - T1553.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Software - T1592.002 Subvert Trust Controls - T1632 Subvert Trust Controls - T1553 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 80d1dfdc-8484-4e48-890b-862273f27c16
Fingerprint 1456ca3221e50ec5
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 16, 2022, midnight
Added to db Dec. 21, 2022, 4:53 p.m.
Last updated Dec. 19, 2024, 12:37 a.m.
Headline Why so, ISO? Mark-of-the-Web, explained
Title Why so, ISO? Mark-of-the-Web, explained - Red Canary
Detected Hints/Tags/Attributes 37/2/2
Source URLs
Redirection Url
Details Source https://redcanary.com/blog/iso-files/
URL Provider
Details Provider Source level domain
Details redcanary.com redcanary.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 360 ✔ Red Canary https://www.redcanary.co/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 6 
windows.iso
Details MITRE ATT&CK Techniques 26 
T1553.005