Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

HackTool - SharpUp PrivEsc Tool Execution

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Detects the use of SharpUp, a tool for local privilege escalation

Sigma

Tags

TA0003 - Persistence TA0004 - Privilege Escalation TA0007 - Discovery TA0002 - Execution TA0005 - Stealth T1615 - Group Policy Discovery T1569.002 - Service Execution T1574.005 - Executable Installer File Permissions Weakness Process Creation Windows Windows Sysmon Windows Eventlog Securityattack.persistenceattack.privilege-escalationattack.discoveryattack.executionattack.stealthattack.t1615attack.t1569.002attack.t1574.005

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?