Application Security
Detecting and Mitigating Stripped Payloads (T1027.008)
Remove symbols and strings from a binary and reverse engineers lose their map. Learn how MITRE describes it and which context clues still stand out.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Detecting and Mitigating Dynamic API Resolution (T1027.007)
Malware can hide which Windows functions it calls until runtime by storing hashes instead of names. Here is what that hides from analysts and what behavior reveals it.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating HTML Smuggling (T1027.006)
A harmless looking HTML page can assemble a malicious file inside the browser, so nothing dangerous crosses your web filter. See the signals and the browser controls.
Oct 18, 20264 min read
Application Security
Detecting and Mitigating Indicator Removal from Tools (T1027.005)
When antivirus flags a tool, the attacker edits out the part that tripped it and tries again. Learn the pattern that gives that retry away.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Compile After Delivery (T1027.004)
Source code is easier to hide than a binary. Attackers deliver text and compile it on the victim machine. Here is what to watch for and where it fits in your CI view.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating Steganography (T1027.003)
Hidden data inside images, audio or text files slips past filters that only check file type. Here is what MITRE says to watch for around those files.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating Software Packing (T1027.002)
Packers compress or encrypt an executable so it unpacks itself in memory. Learn why signatures miss it and which behaviors give a packed binary away.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Binary Padding (T1027.001)
Junk bytes appended to a program change its hash and its size without changing its behavior. Here is what that defeats and what still catches it.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Obfuscated Files or Information (T1027)
Encoded, packed and encrypted payloads are meant to slip past scanners. See what MITRE documents, what behavior gives them away and the controls that help.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.