Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

HackTool - SharpUp PrivEsc Tool Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa

•updated Jun 24, 2025•0•16

Detects the use of SharpUp, a tool for local privilege escalation

Sigma

Tags

TA0004 - Privilege Escalation TA0007 - Discovery TA0002 - Execution T1615 - Group Policy Discovery T1569.002 - Service Execution T1574.005 - Executable Installer File Permissions Weakness TA0003 - Persistence TA0005 - Defense Evasion Process Creation Windowsattack.privilege-escalationattack.discoveryattack.executionattack.t1615attack.t1569.002attack.t1574.005sysmon

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?