T1216_system-script-proxy-execution
Adversaries may use trusted scripts, often signed with certificates, to proxy the execution of malicious files.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1217_browser-information-discovery
Adversaries may enumerate information about browsers to learn more about compromised environments.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.001_compiled-html-file
Adversaries may abuse Compiled HTML files (.chm) to conceal malicious code.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.002_control-panel
Adversaries may abuse control.exe to proxy execution of malicious payloads.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.003_cmstp
Adversaries may abuse CMSTP to proxy execution of malicious code.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.004_installutil
Adversaries may use InstallUtil to proxy execution of code through a trusted Windows utility.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.005_mshta
Adversaries may abuse mshta.exe to proxy execution of malicious .hta files and Javascript or VBScript through a trusted Windows utility.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.007_msiexec
Adversaries may abuse msiexec.exe to proxy execution of malicious payloads.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.008_odbcconf
Adversaries may abuse odbcconf.exe to proxy execution of malicious payloads.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.009_regsvcsregasm
Adversaries may abuse Regsvcs and Regasm to proxy execution of code through a trusted Windows utility.
☆1.21k repo stars⑂201 repo forks
DevOps & Security