T1554Persistence
Compromise Host Software Binary
Adversaries may modify host software binaries to establish persistent access to systems. Software binaries/executables provide a wide range of system commands or services, programs, and libraries. Common software binaries are SSH clients, FTP clients, email clients, web browsers, and many other user or server applications. Adversaries may establish persistence though modifications to host…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
6 Sigma rules tagged T1554Compromise Host Software BinaryT15546 general rules
- DNS HybridConnectionManager Service Bushightest
- HybridConnectionManager Service Installationhightest
- HybridConnectionManager Service Runninghightest
- TanStack Supply-Chain Attack File Creation Indicators - Windowsmediumexperimental
- Linux Setgid Capability Set on a Binary via Setcap Utilitylowexperimental
- Linux Setuid Capability Set on a Binary via Setcap Utilitylowexperimental
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Compromise Host Software Binary
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.