What MITRE ATT&CK T1564.003: Hidden Window (Enterprise Tactic TA0005 - Defense Evasion) requires
MITRE ATT&CK T1564.003 (Hidden Window) is an Enterprise Defense Evasion sub-technique of T1564 (Hide Artifacts). Adversaries may use hidden windows to conceal malicious activity from the plain sight of users. In some cases, windows that would typically be displayed when an application carries out an operation can be hidden. This may be utilized by system administrators to avoid disrupting user work environments when carrying out administrative tasks. Adversaries may abuse these functionalities to hide otherwise visible windows from users so as not to alert the user to adversary activity on the system. Affected platforms: macOS, Windows, Linux. MITRE-documented mitigations include M1038 Execution Prevention, M1033 Limit Software Installation. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls CM-07, SI-07, SI-10.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1564/003/
SHA-256 integrity: 1e298459b1f7cd0bdfb563eabe0004a8062e957e614bfb5140b34cb6062d23d6
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1564.003: Hidden Window (https://attack.mitre.org/techniques/T1564/003/)
- MITRE ATT&CK Tactic TA0005: Defense Evasion (https://attack.mitre.org/tactics/TA0005/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.