Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Systemd Service Creation

SigmaHQ Detections@sigmaHQ

•updated Dec 8, 2025•0•0•0

Detects a creation of systemd services which could be used by adversaries to execute malicious code.

Sigma

Tags

TA0004 - Privilege Escalation TA0003 - Persistence T1543.002 - Systemd Service Service Created File Creation Linux Linux Auditdattack.privilege-escalationattack.persistenceattack.t1543.002

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?