Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1547.008

LSASS Driver

PersistencePrivilege Escalation 2 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
splunk Windows Autostart Execution LSASS Driver Registry Modification production 2026-10-02
sigma DLL Load via LSASS test 2022-04-21