ATT&CK technique
View on MITRE ATT&CK →
T1548.006
TCC Manipulation
Privilege Escalation
3 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Privacy Control Bypass via TCCDB Modification | production | 2026-09-18 |
| elastic | Suspicious TCC Access Granted for User Folders | production | 2026-09-18 |
| elastic | Full Disk Access Permission Check | production | 2026-09-18 |