For example, Forfiles, the Program Compatibility Assistant (pcalua.exe), components of the Windows Subsystem for Linux (WSL), as well as other utilities may invoke the execution of programs and commands from a Command and Scripting Interpreter, Run window, or via scripts. Various Windows utilities may be used to execute commands, possibly without invoking cmd. Try it using Invoke-Atomic Indirect Command Execution Description from ATT&CKĪdversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters. Atomic Test #3 - Indirect Command Execution - conhost.exe.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
March 2023
Categories |