T1398 Boot or Logon Initialization Scripts

Mobile

Adversaries may use scripts automatically executed at boot or logon initialization to establish persistence. Initialization scripts are part of the underlying operating system and are not accessible to the user unless the device has been rooted or jailbroken.

01

platforms

Platforms this applies to.

AndroidiOS
02

mitigations

ATT&CK mitigations that reduce this.

03

detected by (3)

Data components that detect this.

04

software (4)

Malware and tools associated with this.

05

source

Where this definition is published.