ATT&CK technique
View on MITRE ATT&CK →
T1547.013
XDG Autostart Entries
PersistencePrivilege Escalation
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Network Connections Initiated Through XDG Autostart Entry | production | 2026-10-08 |
| elastic | KDE AutoStart Script or Desktop File Creation | production | 2026-10-05 |
| elastic | Potential Persistence via File Modification | production | 2026-09-18 |
| elastic | Pod or Container Creation with Suspicious Command-Line | production | 2026-09-18 |
| elastic | Executable Bit Set for Potential Persistence Script | production | 2026-09-18 |