Privileges Escalation Techniques (Basic to Advanced) for Windows
Tags
| attack-pattern: | Installer Packages - T1546.016 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Windows Service - T1543.003 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | 87f2cbb5-91fd-43cc-86e8-344c3877d095 |
| Fingerprint | 342b3150f52765e7 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 21, 2023, 12:49 p.m. |
| Added to db | May 25, 2023, 1:55 a.m. |
| Last updated | Nov. 2, 2024, 1:09 a.m. |
| Headline | Privileges Escalation Techniques (Basic to Advanced) for Windows |
| Title | Privileges Escalation Techniques (Basic to Advanced) for Windows |
| Detected Hints/Tags/Attributes | 31/1/12 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 136 | ✔ | InfoSec Write-ups - Medium | https://infosecwriteups.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | File | 1 | c:\program files\script dir\service.exe |
|
| Details | File | 9 | c:\program.exe |
|
| Details | File | 1 | c:\program files\script.exe |
|
| Details | File | 3 | common.exe |
|
| Details | File | 1 | c:\program files\unquoted path service\common files\unquotedpathservice.exe |
|
| Details | File | 1 | c:\program files\unquoted.exe |
|
| Details | File | 1 | c:\program files\unquoted path.exe |
|
| Details | File | 1 | c:\program files\unquoted path service\common.exe |
|
| Details | File | 14 | powerup.ps1 |
|
| Details | Windows Registry Key | 4 | HKCU\SOFTWARE\Policies\Microsoft\Windows\Installer |
|
| Details | Windows Registry Key | 4 | HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer |
|
| Details | Windows Registry Key | 33 | HKLM\SYSTEM\CurrentControlSet\Services |