CmdID / Techniques / T1543

T1543.002 Create or Modify System Process: Systemd Service

Adversaries may create or modify systemd services to repeatedly execute malicious payloads as part of persistence. MITRE ATT&CK

1 Sigma rule T1543.002 on attack.mitre.org