MITRE D3FENDdefensive technique
D3-SICA System Init Config Analysis
- Tactic
- Detect
- Synonyms
- Autorun Analysis, Startup Analysis
Definition
Analysis of any system process startup configuration.
Related
Counters · MITRE ATT&CK (7)
- T1574.011 Services Registry Permissions Weakness sub-technique
- T1574 Hijack Execution Flow technique
- T1547 Boot or Logon Autostart Execution technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1037.004 RC Scripts sub-technique
- T1037.005 Startup Items sub-technique
- T1037 Boot or Logon Initialization Scripts technique
Child of · MITRE D3FEND (1)
- D3-OSM Operating System Monitoring defensive technique
References
- https://car.mitre.org/analytics/CAR-2013-01-002/ CAR-2013-01-002: Autorun Differences
- https://car.mitre.org/analytics/CAR-2020-09-005/ CAR-2020-09-005: AppInit DLLs
- https://car.mitre.org/analytics/CAR-2020-11-001/ CAR-2020-11-001: Boot or Logon Initialization Scripts