ATT&CK technique
View on MITRE ATT&CK →
T1037.002
Login Hook
PersistencePrivilege Escalation
3 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Persistence via Login or Logout Hook | production | 2026-09-18 |
| elastic | Potential Persistence via Login Hook | production | 2026-09-18 |
| splunk | MacOS LoginHook Persistence | production | 2026-05-13 |