> Windows Syscalls

← Back to ATT&CK index

T1222.001sub-technique

Windows File and Directory Permissions Modification

View on attack.mitre.org →

1 syscalls implement this technique

NtSetSecurityObject
Writes a new SECURITY_DESCRIPTOR (owner / DACL / SACL / label) onto a kernel object by handle.