ATT&CK technique
View on MITRE ATT&CK →
T1553.003
SIP and Trust Provider Hijacking
Defense Impairment
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | SIP Provider Modification | production | 2026-09-18 |
| splunk | Windows Registry SIP Provider Modification | production | 2026-05-13 |
| splunk | Windows SIP Provider Inventory | production | 2026-05-13 |
| splunk | Windows SIP WinVerifyTrust Failed Trust Validation | production | 2026-05-13 |
| sigma | Kapeka Backdoor Configuration Persistence | test | 2024-07-03 |
| sigma | Persistence Via New SIP Provider | test | 2023-08-17 |