CmdID

CmdID / Techniques

T1554 Compromise Host Software Binary

Adversaries may modify host software binaries to establish persistent access to systems. MITRE ATT&CK

1 program on CmdID 2 Sigma rules T1554 on attack.mitre.org

Programs for it

documented by LOLBAS and GTFOBins, or named by its rules

Sigma rules tagged with it

process creation, the highest levels first