ATT&CK 기법 · Execution
Native API T1106
이 기법을 다룬 REVELARE 한국어 위협 분석 3편 · Execution
이 기법을 다룬 분석
MITRE 공식 정의
Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.(Citation: NT API Windows)(Citation: Linux Kernel API) These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests durin…
플랫폼: Linux, macOS, Windows