Skip to content
Threat Feed
Subscribe

Tag

Com-Hijacking

2 briefs RSS
low advisory

Component Object Model (COM) Hijacking via Registry Modification

Adversaries may establish persistence by executing malicious content triggered by hijacked references to COM objects through Component Object Model (COM) hijacking via registry modification on Windows systems.

Elastic Defend +9 persistence com-hijacking windows registry defense-evasion privilege-escalation
2r 4t
low advisory

Component Object Model (COM) Hijacking via Registry Modification

This rule detects Component Object Model (COM) hijacking via registry modification, where adversaries establish persistence by executing malicious content triggered by hijacked references to COM objects.

Windows persistence defense-evasion privilege-escalation com-hijacking
2r 4t