> Windows Syscalls
Back to ATT&CK index
T1027.013sub-technique

Encrypted/Encoded File

View on attack.mitre.org

2 syscalls implement this technique