Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1547.015

Login Items

PersistencePrivilege Escalation 2 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic Creation of Hidden Login Item via Apple Script production 2026-09-18
sigma Windows Terminal Profile Settings Modification By Uncommon Process test 2023-07-22