Home > CAPEC List > CAPEC-551: Modify Existing Service (Version 2.11)  

CAPEC-551: Modify Existing Service

Modify Existing Service
Definition in a New Window Definition in a New Window
Attack Pattern ID: 551
Abstraction: Detailed
Status: Draft
Completeness: Stub
Presentation Filter:
+ Summary

When an operating system starts, it also starts programs called services or daemons. Modifying existing services may break existing services or may enable services that are disabled/not commonly used.

+ Solutions and Mitigations

Limit privileges of user accounts so service changes can only be performed by authorized administrators. Also monitor any service changes that may occur inadvertently.

+ References
[R.551.1] ATT&CK Project. "Modify Existing Service (1031)". MITRE. <https://attack.mitre.org/wiki/Modify_existing_service>.
+ Content History
CAPEC Content TeamThe MITRE Corporation2015-11-09Internal_CAPEC_Team

More information is available — Please select a different filter.
Page Last Updated or Reviewed: August 04, 2017