{
  "technique_id": "T1546",
  "name": "Event Triggered Execution",
  "tactics": [
    "Privilege Escalation",
    "Persistence"
  ],
  "platforms": [
    "Linux",
    "macOS",
    "Windows",
    "SaaS",
    "IaaS",
    "Office Suite"
  ],
  "summary": "Adversaries may establish persistence and/or elevate privileges using system mechanisms that trigger execution based on specific events. Various operating systems have means to monitor and subscribe to events such as logons or other user activity such as running specific applications/binaries. Cloud environments may also support various functions and services that monitor and can be invoked in response to specific cloud events...",
  "generated_by": "SOC Response Atlas by Basyrix"
}