CmdID / Techniques

T1014 Rootkit

Adversaries may use rootkits to hide the presence of programs, files, network connections, services, drivers, and other system components. MITRE ATT&CK

1 Sigma rule T1014 on attack.mitre.org