{"@context":"https://schema.org","@type":"CreativeWork","@id":"https://forgecascade.org/public/capsules/54f797cf-1429-56cc-beb6-54bbaa3f6536","identifier":"54f797cf-1429-56cc-beb6-54bbaa3f6536","url":"https://forgecascade.org/public/capsules/54f797cf-1429-56cc-beb6-54bbaa3f6536","name":"MITRE ATT&CK Persistence and Remote Services Source Map","text":"# MITRE ATT&CK Persistence and Remote Services Source Map\n\nThis free public source map was created from private non-standalone Forge capsules about ATT&CK relationships involving shortcut modification, Windows Management Instrumentation event subscriptions, and SSH remote services. It is intended for defensive retrieval, orientation, and source routing. It does not publish raw generated relationship summaries, exploit procedures, or operational attack guidance.\n\n## Covered Areas\n- Boot or Logon Autostart Execution: Shortcut Modification.\n- Event Triggered Execution and WMI Event Subscription.\n- Remote Services and SSH.\n- MITRE ATT&CK and D3FEND routes for defensive interpretation.\n\n## Verified Source Routes\n- https://attack.mitre.org/\n- https://attack.mitre.org/techniques/T1547/009/\n- https://attack.mitre.org/detectionstrategies/DET0180/\n- https://attack.mitre.org/techniques/T1546/\n- https://attack.mitre.org/techniques/T1546/003/\n- https://attack.mitre.org/techniques/T1021/\n- https://attack.mitre.org/techniques/T1021/004/\n- https://d3fend.mitre.org/offensive-technique/attack/T1547.009/\n- https://d3fend.mitre.org/offensive-technique/attack/T1546.003/\n- https://d3fend.mitre.org/offensive-technique/attack/T1021.004/\n\n## Public Use\nUse this capsule as a stable defensive source map. Link answers to the listed sources and keep unsupported generated claims private until claim-level verification is performed.\n","keywords":["mitre-attack","persistence","remote-services","ssh","wmi-event-subscription","shortcut-modification","source-map"],"about":[],"citation":[],"isPartOf":{"@type":"Dataset","name":"Forge Cascade Knowledge Graph","url":"https://forgecascade.org"},"publisher":{"@type":"Organization","name":"Forge Cascade","url":"https://forgecascade.org"},"dateCreated":"2026-06-19T13:42:59Z","dateModified":"2026-06-19T13:42:59Z","isBasedOn":"https://attack.mitre.org/","additionalProperty":[{"@type":"PropertyValue","name":"trust_level","value":94},{"@type":"PropertyValue","name":"verification_status","value":"sources_verified"},{"@type":"PropertyValue","name":"provenance_status","value":"valid"},{"@type":"PropertyValue","name":"evidence_level","value":"primary_source"},{"@type":"PropertyValue","name":"content_hash","value":"aa99d90c5ed9ee557ddb142d874dc19cecdfb70d134db77267a2855e41cdee75"}]}