MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Persistence/ T1547.014

T1547.014Active Setup

T1547.014 — Active Setup is a MITRE ATT&CK technique in the Persistence tactic. Clankerusecase tracks 2 detection use cases covering it.

PersistencePrivilege Escalation

View on the matrix → Filter Detection Library MITRE official spec ↗

2Use cases

0Articles

0Sub-techniques

2Tactics

↑ Parent technique: T1547 · Boot or Logon Autostart Execution

Use cases covering this technique (2)

Active Setup Registry Autostart ESCU actions · alerting P Windows Audit Policy Auditing Option Modified - Registry ESCU actions · hunting P