> Windows Syscalls

← Back to ATT&CK index

T1222

File and Directory Permissions Modification

View on attack.mitre.org →

1 syscalls implement this technique

NtSetSecurityObject
Writes a new SECURITY_DESCRIPTOR (owner / DACL / SACL / label) onto a kernel object by handle.