We're updating the issue view to help you get more done. 

Shortcut Modification

Description

Shortcuts or symbolic links are ways of referencing other files or programs that will be opened or executed when the shortcut is clicked or executed by a system startup process. Adversaries could use shortcuts to execute their tools for persistence. They may create a new shortcut as a means of indirection that may use [Masquerading](https://attack.mitre.org/techniques/T1036) to look like a legitimate program. Adversaries could also edit the target path or entirely replace an existing shortcut so their tools will be executed instead of the intended legitimate program.

id

T1023

tactic

persistence

datasources

Process command-line parameters
Process monitoring
File monitoring

maturity

Not Tracked

Assignee

Unassigned
Configure