Skip to content

Hide Navigation Hide TOC

Replace Desktop Wallpaper by Powershell (c5ac6a1e-9407-45f5-a0ce-ca9a0806a287)

An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users. This may take the form of modifications to internal websites, or directly to user systems with the replacement of the desktop wallpaper

Cluster A Galaxy A Cluster B Galaxy B Level
Replace Desktop Wallpaper by Powershell (c5ac6a1e-9407-45f5-a0ce-ca9a0806a287) Sigma-Rules Internal Defacement - T1491.001 (8c41090b-aa47-4331-986b-8c9a51a91103) Attack Pattern 1
Defacement - T1491 (5909f20f-3c39-4795-be06-ef1ea40d350b) Attack Pattern Internal Defacement - T1491.001 (8c41090b-aa47-4331-986b-8c9a51a91103) Attack Pattern 2