Técnica MITRE ATT&CK · Persistencia, Escalada de privilegios

`T1037.004` RC Scripts

Subtécnica de T1037 Boot or Logon Initialization Scripts

Adversaries may establish persistence by modifying RC scripts, which are executed during a Unix-like system’s startup. These files allow system administrators to map and start custom services at startup for different run levels. RC scripts require root privileges to modify. Adversaries may establish persistence by adding a malicious binary path or shell commands to rc.local, rc.common, and other…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

CyclopsBlink

Reglas Sigma para cazarla

SigmaHQ no tiene reglas para esta técnica.

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.