ATT&CK technique
View on MITRE ATT&CK →
T1546.016
Installer Packages
Privilege EscalationPersistence
9 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Suspicious APT Package Manager Execution | production | 2026-09-18 |
| elastic | APT Package Manager Configuration File Creation | production | 2026-09-18 |
| elastic | Suspicious APT Package Manager Network Connection | production | 2026-09-18 |
| elastic | DNF Package Manager Plugin File Creation | production | 2026-09-18 |
| elastic | DPKG Package Installed by Unusual Parent Process | production | 2026-09-18 |
| elastic | Unusual DPKG Execution | production | 2026-09-18 |
| elastic | RPM Package Installed by Unusual Parent Process | production | 2026-09-18 |
| elastic | Yum Package Manager Plugin File Creation | production | 2026-09-18 |
| elastic | Suspicious File Creation via Pkg Install Script | production | 2026-09-18 |