Using Mutexes to Write Data to the Same Logfile Across Processes With PowerShell
Tags
attack-pattern: Data Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 26601702-9d58-4540-8926-e2602664879e
Fingerprint 5f6e8fb141b0dd19
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 30, 2014, midnight
Added to db Jan. 18, 2023, 9:57 p.m.
Last updated Nov. 18, 2024, 1:38 a.m.
Headline UNKNOWN
Title Using Mutexes to Write Data to the Same Logfile Across Processes With PowerShell
Detected Hints/Tags/Attributes 19/1/13
Source URLs
Redirection Url
Details Source https://learn-powershell.net/2014/09/30/using-mutexes-to-write-data-to-the-same-logfile-across-processes-with-powershell/
URL Provider
Details Provider Source level domain
Details learn-powershell.net learn-powershell.net
Attributes
Details Type #Events CTI Value
Details Domain 201 
msdn.microsoft.com
Details Domain 107 
system.management
Details Domain 1 
runspacepool.open
Details File 1209 
powershell.exe
Details File 1 
c:\importantlogfile.txt
Details File 3 
c:\temp\log.txt
Details File 1 
invoke-mutextestrunspace.ps1
Details File 1 
c:\testlog.txt
Details File 2 
runspaces.ini
Details Mandiant Temporary Group Assumption 1 
TEMP.POWERSHELL
Details Mandiant Temporary Group Assumption 1 
TEMP.HANDLE
Details Url 1 
http://msdn.microsoft.com/en-us/library/windows/desktop/ms686927(v=vs.85).aspx
Details Url 1 
http://msdn.microsoft.com/en-us/library/system.threading.mutex(v=vs.110).aspx