ATT&CK technique
View on MITRE ATT&CK →
T1546.013
PowerShell Profile
Privilege EscalationPersistence
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Persistence via PowerShell profile | production | 2026-09-18 |
| sigma | PowerShell Profile Modification | test | 2023-10-23 |
| sigma | Potential Persistence Via PowerShell User Profile Using Add-Content | test | 2023-05-04 |
| sigma | VsCode Powershell Profile Modification | test | 2023-01-06 |