MITRE ATT&CK technique

Replication Through Removable Media detection rulesT1091

Replication Through Removable Media (T1091) is a MITRE ATT&CK technique in the Lateral Movement tactic. This page lists the 1 community-maintained Sigma detection rule in the library mapped to T1091 and its sub-techniques. Each rule includes its detection logic, log source, false positives and original YAML. These rules mainly target windows.