mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
Desiree Beck
37 lines
3.6 KiB
Markdown
37 lines
3.6 KiB
Markdown
|||
|
|
|--|-----|
|
|
|**ID**|**M9012**|
|
|
|
|
# Persistence #
|
|
Malware aims to remain on a system regardless of system events.
|
|
|
|
* **Application Shimming** [T1138](https://github.com/MBCProject/mbc-markdown/blob/master/privilege-escalation/app-shimming.md)
|
|
* **.bash_profile and .bashrc** [T1156](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/bash.md)
|
|
* **BITS Jobs** [T1197](https://github.com/MBCProject/mbc-markdown/blob/master/defense-evasion/bits-jobs.md)
|
|
* **Boot Sector Modification** [M0028](https://github.com/MBCProject/mbc-markdown/blob/master/defense-evasion/boot-sector-mod.md)
|
|
* **Change Default File Association** [T1042](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/change-default-file-assoc.md)
|
|
* **Component Firmware** [E1109](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/component-firmware.md)
|
|
* **Component Object Model Hijacking** [T1122](https://github.com/MBCProject/mbc-markdown/blob/master/defense-evasion/component-hijack.md)
|
|
* **DLL Search Order Hijacking** [T1038](https://github.com/MBCProject/mbc-markdown/blob/master/privilege-escalation/dll-search-order-hijack.md)
|
|
* **File System Permissions Weakness** [T1044](https://github.com/MBCProject/mbc-markdown/blob/master/privilege-escalation/file-system-perm-weakness.md)
|
|
* **Hidden Files and Directories** [T1158](https://github.com/MBCProject/mbc-markdown/blob/master/defense-evasion/hidden-files.md)
|
|
* **Hooking** [E1179](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access/hooking.md)
|
|
* **Image File Execution Options Injection** [T1183](https://github.com/MBCProject/mbc-markdown/blob/master/defense-evasion/image-file-exe-opt-inj.md)
|
|
* **Kernel Modules and Extensions** [T1215](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/kernel-modules-ext.md)
|
|
* **Launch Daemon** [T1160](https://github.com/MBCProject/mbc-markdown/blob/master/privilege-escalation/launch-daemon.md)
|
|
* **Local Job Scheduling** [T1168](https://github.com/MBCProject/mbc-markdown/blob/master/execution/local-job-sch.md)
|
|
* **Malicious Network Driver** [M0026](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/malicious-network-drv.md)
|
|
* **Modify Existing Service** [T1031](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/modify-service.md)
|
|
* **Modify Trusted Execution Environment** [T1399](https://github.com/MBCProject/mbc-markdown/blob/master/defense-evasion/mod-trust-exe-environ.md)
|
|
* **New Service** [T1050](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/new-service.md)
|
|
* **Office Application Startup** [T1137](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/office-app-startup.md)
|
|
* **Port Knocking** [T1205](https://github.com/MBCProject/mbc-markdown/blob/master/command-and-control/port-knocking.md)
|
|
* **Redundant Access** [T1008](https://github.com/MBCProject/mbc-markdown/blob/master/defense-evasion/redundant-access.md)
|
|
* **Registry Run Keys / Startup Folder** [E1060](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/registry-run-startup.md)
|
|
* **Scheduled Task** [T1053](https://github.com/MBCProject/mbc-markdown/blob/master/execution/scheduled-task.md)
|
|
* **Setuid and Setgid** [T1166](https://github.com/MBCProject/mbc-markdown/blob/master/privilege-escalation/setuid-setgid.md)
|
|
* **Shutdown Event** [M0035](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/shutdown-event.md)
|
|
* **Startup Items** [T1165](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/startup-items.md)
|
|
* **System Firmware** [T1109](https://github.com/MBCProject/mbc-markdown/blob/master/persistence/system-firmware.md)
|
|
|