> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/evasion.md).

# Defense Evasion

## Theory

Defense Evasion consists of techniques that adversaries use to avoid detection throughout their compromise. Techniques used for defense evasion include uninstalling/disabling security software or obfuscating/encrypting data and scripts. Adversaries also leverage and abuse trusted processes to hide and masquerade their malware. Other tactics’ techniques are cross-listed here when those techniques include the added benefit of subverting defenses.

![](/files/FNiCykG30k371VHOdwj7)

## Resources

{% embed url="<https://attack.mitre.org/tactics/TA0005/>" %}

{% embed url="<https://www.unifiedkillchain.com/#thescience>" %}