>
Windows Syscalls
Syscalls
Version map
ATT&CK
Malware
Generator
Syscall graph
Blog
Language
EN — English
FR — Français
ES — Español
DE — Deutsch
← Back to ATT&CK index
T1547.006
sub-technique
Boot or Logon Autostart Execution: Kernel Modules and Extensions
View on attack.mitre.org →
1 syscalls implement this technique
NtPrivilegedServiceAuditAlarm
Emits a Security event-log entry reporting a privileged service operation (event 4673).