CAPEC 551 Modify Existing Service

Description

🇬🇧 English Original 🇮🇹 Italiano AI Translated

When an operating system starts, it also starts programs called services or daemons. Modifying existing services may break existing services or may enable services that are disabled/not commonly used.

AI Generated Translation

"Quando un sistema operativo si avvia, avvia anche programmi chiamati servizi o daemon. La modifica dei servizi esistenti può interrompere i servizi esistenti o può abilitare servizi che sono disabilitati o non comunemente usati."

Mitigations

1

Limit Privileges Of User Accounts So Service Changes Can Only Be Performed By Authorized Administrators. Also Monitor Any Service Changes That May Occur Inadvertently.

Consequences

Consequence Information

{'impacts': [], 'impacts_translate': [], 'scopes': [], 'scopes_translate': []}

Relationships

Parent CAPECs

CAPEC-542

Related ATT&CK Techniques

1

T1543

Create or Modify System Process

Adversaries may create or modify system-level processes to repeatedly execute malicious payloads as part of persistence. When operating systems boot …