ATT&CK technique
View on MITRE ATT&CK →
T1137.002
Office Test
Persistence
3 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Office Test Registry Persistence | production | 2026-09-18 |
| sigma | Office Application Startup - Office Test | test | 2023-11-08 |
| sigma | Suspicious Microsoft Office Child Process - MacOS | test | 2023-02-04 |