Persistence Via New SIP Provider (5a2b21ee-6aaa-4234-ac9d-59a59edf90a1)

Detects when an attacker register a new SIP provider for persistence and defense evasion

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Persistence Via New SIP Provider (5a2b21ee-6aaa-4234-ac9d-59a59edf90a1)	Sigma-Rules	SIP and Trust Provider Hijacking - T1553.003 (543fceb5-cb92-40cb-aacf-6913d4db58bc)	Attack Pattern	1
Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7)	Attack Pattern	SIP and Trust Provider Hijacking - T1553.003 (543fceb5-cb92-40cb-aacf-6913d4db58bc)	Attack Pattern	2