Home/ MITRE Matrix/ Defense Evasion/ T1134.005

T1134.005SID-History Injection

T1134.005 — SID-History Injection is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 4 detection use cases covering it.

Defense EvasionPrivilege Escalation

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

0Articles

0Sub-techniques

2Tactics

↑ Parent technique: T1134 · Access Token Manipulation

Use cases covering this technique (4)

Windows AD Cross Domain SID History Addition ESCU actions · alerting P Windows AD Privileged Account SID History Addition ESCU actions · alerting P Windows AD Same Domain SID History Addition ESCU actions · alerting P Windows AD SID History Attribute Modified ESCU actions · alerting P