D3-USICA

Detect
User Session Init Config Analysis

Definition

Analyzing modifications to user session config files such as .bashrc or .bash_profile.

Artifact Relationships

This defensive technique relates to specific digital artifacts.

analyzes
User Session Init Config Analysis
User Init Configuration File

References

Reference - CAR-2020-09-002: Component Object Model Hijacking - MITRE Reference - CAR-2020-11-011: Registry Edit from Screensaver Reference - Identification and extraction of key forensics indicators of compromise using subject-specific filesystem views Reference - Registry Key Security and Access Rights