t1036.002 | LoFP

t1036.002

Title	Tags
commandlines that contains scriptures such as arabic or hebrew might make use of this character	t1036 t1036.002 windows sigma
filenames that contains scriptures such as arabic or hebrew might make use of this character	t1036 t1036.002 windows sigma
implementation in regions that use right to left in native language.	t1036.002 endpoint splunk
legitimate administrative actions using mmc to execute misnamed `.msc` files.	t1036 t1036.002 t1204 t1204.002 t1218 t1218.014 windows sigma
unconventional but non-malicious usage of rlo or reversed extensions.	t1036 t1036.002 t1204 t1204.002 t1218 t1218.014 windows sigma