Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1548.004

Elevated Execution with Prompt

Privilege Escalation 2 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic Apple Scripting Execution with Administrator Privileges production 2026-09-18
elastic Execution with Explicit Credentials via Scripting production 2026-09-18