Matching HPsACDAdDS

URI: MP-HPsACDAdDS

Description: Finds a Host running a Process that CRUD deletes locally stored Data, plus any location context for access to the Host with the rights of the Process, and optionally the Host and Process managers.

Root Pattern: R-HPDAdDS

R-HPDAdDS

Finds a Host running a Process that CRUD deletes locally stored Data.

(empty)

DS.A.HPsACDAdDS.1

Use of Process to prevent access to Data: someone with the rights of Process on its host device Host can exploit the rights of Process to delete the locally stored copy of Data.

DS.A.HPsACDAdDS.7

Infected process Process encrypts or deletes data Data: the process having become infected by malware is able to delete or otherwise disable access to the stored copy of Data on its host device Host.

DS.W.HPsACDAdDS.7

Infected process Process infects data Data stored on host Host: the process having become infected by malware is able to insert itself into the stored copy of Data on its host device Host.

DS.A.HPsACDAdDS.4

Attacker exploit at Process to delete Data: the attacker exploits a vulnerability in process Process and is able to delete or otherwise disable access to the stored copy of Data on its host device Host.