Skip to main content

CCC.Monitor.TH07: Trigger Malicious Code

Threat ID:CCC.Monitor.TH07
Title:Trigger Malicious Code
Description:

If a malicious actor is able to create new triggers, they would be able to use valid metric data to trigger malicious actions and re-compromise a newly replaced container or compute instance.

External Mappings

Reference IDEntry IDStrengthRemarks
MITRE-ATT&CK
T1546
0
Event Triggered Execution