Anti-Forensics
Account Misuse
Clear Browser Artifacts
Clear Email Artifacts
Code Contribution Obfuscation and Misrepresentation
Decrease Privileges
Delayed Execution Triggers
Delete User Account
Deletion of Volume Shadow Copy
Disk Wiping
File Deletion
File Encryption
Hide Artifacts
Hiding or Destroying Command History
Log Deletion
Log Modification
Message Deletion
Modify Windows Registry
Network Obfuscation
Physical Destruction of Storage Media
Physical Removal of Disk Storage
Stalling
Steganography
System Shutdown
Timestomping
Tripwires
Uninstalling Software
Virtualization
Windows System Time Modification
- ID: AF031.001
- Created: 21st March 2026
- Updated: 27th March 2026
- Contributor: The ITM Team
Misleading Contribution Description
A subject uses a description that inaccurately describes the nature, scope, or intent of code changes to reduce scrutiny or conceal harmful or unauthorized functionality.
This may include minimizing the perceived impact of changes, omitting critical details, or framing modifications as routine fixes, refactoring, or maintenance work. Misleading contribution descriptions distort the audit trail and can delay or misdirect investigative efforts, particularly in environments where descriptions are relied upon for rapid triage or historical analysis.
This technique is especially effective when combined with complex or subtle code changes that are unlikely to be fully reviewed at a granular level.