Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Persistence/ T1037

T1037Boot or Logon Initialization Scripts

T1037 — Boot or Logon Initialization Scripts is a MITRE ATT&CK technique in the Persistence tactic. Clankerusecase tracks 3 detection use cases covering it.

PersistencePrivilege Escalation
View on the matrix → Filter Detection Library MITRE official spec ↗
3Use cases
0Articles
5Sub-techniques
2Tactics

Sub-techniques (5)

T1037.002 · Login HookT1037.001 · Logon Script (Windows)T1037.003 · Network Logon ScriptT1037.004 · RC ScriptsT1037.005 · Startup Items

Use cases covering this technique (3)

Linux MOTD Script Added ESCU actions · hunting P Linux Suspicious XDG Autostart ESCU actions · hunting P Linux UDEV Rule Created ESCU actions · hunting P