T1564

Hide Artifacts

Conceals its own processes, sockets and on-host artifacts via the eBPF component and binary path masquerade.

discovered 2026-06-03
View on MITRE ATT&CK ↗

Seen in packages

Campaigns