ATT&CK technique
View on MITRE ATT&CK →
T1547.010
Port Monitors
PersistencePrivilege Escalation
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Monitor Registry Keys for Print Monitors | production | 2026-10-09 |
| elastic | Potential Port Monitor or Print Processor Registration Abuse | production | 2026-09-18 |
| sigma | Add Port Monitor Persistence in Registry | test | 2024-03-25 |
| sigma | Default RDP Port Changed to Non Standard Port | test | 2024-03-25 |
| sigma | Bypass UAC Using Event Viewer | test | 2023-08-17 |
| sigma | Potential Suspicious Activity Using SeCEdit | test | 2022-12-30 |