ATT&CK technique
View on MITRE ATT&CK →
T1547.014
Active Setup
PersistencePrivilege Escalation
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Uncommon Registry Persistence Change | production | 2026-09-18 |
| splunk | Active Setup Registry Autostart | production | 2026-05-13 |
| splunk | Windows Audit Policy Auditing Option Modified - Registry | production | 2026-05-13 |
| sigma | Potential Suspicious Activity Using SeCEdit | test | 2022-12-30 |