T1547.013

Boot or Logon Autostart Execution: XDG Autostart Entries

discovered 2026-06-03

eBPF/kernel-level persistence component loaded to survive and re-hook on the host. (Mapped from JFrog's eBPF persistence note.)

View on MITRE ATT&CK

Seen in packages

Campaigns