DisARMS

Reported Context (1)

Prior work worth naming: DisARMS (Grothe, Mainka, Rösler & Schwenk, WOOT '16, MSRC Case 33210) covered client-side protection removal via the MSIPC SDK, a different surface from the server-side key extraction this AD RMS Recon Shows How Domain Users Can Map Protected Content and Service-Group Boundaries

People (4)

MITRE ATT&CK (3)

Vendors (1)

Products (4)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.