CmdID / Techniques / T1548

T1548.001 Abuse Elevation Control Mechanism: Setuid and Setgid

An adversary may abuse configurations where an application has the setuid or setgid bits set in order to get code running in a different (and possibly more privileged) user’s context. MITRE ATT&CK

1 Sigma rule T1548.001 on attack.mitre.org