CmdID / Techniques / T1546

T1546.011 Event Triggered Execution: Application Shimming

Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by application shims. MITRE ATT&CK

2 Sigma rules T1546.011 on attack.mitre.org