EnvyScout | Netskope Threat Labs

Stats

14 techniques across 6 tactics.

T1059Command and Scripting Interpreter
- T1059.007JavaScript
- T1059.003Windows Command Shell
T1204User Execution
- T1204.002Malicious File

T1027Obfuscated Files or Information
- T1027.013Encrypted/Encoded File
- T1027.006HTML Smuggling
T1036Masquerading
T1140Deobfuscate/Decode Files or Information
T1218System Binary Proxy Execution
- T1218.011Rundll32
T1480Execution Guardrails
T1564Hide Artifacts
- T1564.001Hidden Files and Directories

Alert Name	Engine
Document-HTML.Dropper.EnvyScout	ATP Sandbox Adv. Heuristics
Script-JS.Dropper.EnvyScout	ATP Sandbox Adv. Heuristics