T1543.002PersistencePrivilege Escalation
Systemd Service
Adversaries may create or modify systemd services to repeatedly execute malicious payloads as part of persistence. Systemd is a system and service manager commonly used for managing background daemon processes (also known as services) and other system resources. Systemd is the default initialization (init) system on many Linux distributions replacing legacy init systems, including SysVinit and…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
4 Sigma rules tagged T1543.002Systemd ServiceT1543.0024 general rules
- LiteLLM / TeamPCP Supply Chain Attack Indicatorshighexperimental
- TeamPCP LiteLLM Supply Chain Attack Persistence Indicatorshighexperimental
- Systemd Service Creationmediumtest
- Service Reload or Start - Linuxlowtest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Systemd Service
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.