ServiceDll Hijack

SigmaHQ Detections@sigmaHQ

•updated Aug 31, 2026•0•0•1

Detects changes to the "ServiceDLL" value related to a service in the registry. This is often used as a method of persistence.