Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1547.003

Time Providers

PersistencePrivilege Escalation 3 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic Potential Persistence via Time Provider Modification production 2026-09-18
splunk Time Provider Persistence Registry production 2026-07-08
sigma New TimeProviders Registered With Uncommon DLL Name test 2024-03-26