ATT&CK technique
View on MITRE ATT&CK →
T1134.005
SID-History Injection
StealthPrivilege Escalation
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows AD Privileged Account SID History Addition | production | 2026-09-22 |
| splunk | Windows AD Cross Domain SID History Addition | production | 2026-05-13 |
| splunk | Windows AD Same Domain SID History Addition | production | 2026-05-13 |
| splunk | Windows AD SID History Attribute Modified | production | 2026-05-13 |
| sigma | Addition of SID History to Active Directory Object | stable | 2017-02-19 |