Esc
Login Items - T1547.015
(ATT&CK® Technique)
Definition
Adversaries may add login items to execute upon user login to gain persistence or escalate privileges. Login items are applications, documents, folders, or server connections that are automatically launched when a user logs in. Login items can be added via a shared file list or Service Management Framework. Shared file list login items can be set using scripting languages such as AppleScript, whereas the Service Management Framework uses the API call SMLoginItemSetEnabled
.
D3FEND Inferred Relationships
Browse the D3FEND knowledge graph by clicking on the nodes below.