{
  "technique_id": "T1140",
  "name": "Deobfuscate/Decode Files or Information",
  "tactics": [
    "Stealth"
  ],
  "platforms": [
    "ESXi",
    "Linux",
    "macOS",
    "Windows"
  ],
  "summary": "Adversaries may use [Obfuscated Files or Information](https://attack.mitre.org/techniques/T1027) to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system...",
  "generated_by": "SOC Response Atlas by Basyrix"
}