ATT&CK technique
View on MITRE ATT&CK →
T1546.007
Netsh Helper DLL
Privilege EscalationPersistence
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Netsh Helper DLL | production | 2026-09-18 |
| sigma | Potential Persistence Via Netsh Helper DLL - Registry | test | 2025-10-08 |
| sigma | Potential Persistence Via Netsh Helper DLL | test | 2023-11-28 |
| sigma | New Netsh Helper DLL Registered From A Suspicious Location | test | 2023-11-28 |
| sigma | Potential Suspicious Activity Using SeCEdit | test | 2022-12-30 |