T1546.002 Event Triggered Execution: Screensaver

Adversaries may establish persistence by executing malicious content triggered by user inactivity. MITRE ATT&CK

1 program on CmdID 1 Sigma rule T1546.002 on attack.mitre.org

Part of

MITRE ATT&CK

T1546Event Triggered Execution

documented by LOLBAS and GTFOBins, or named by its rules

process creation, the highest levels first