mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-27 07:18:05 +01:00
Adjustment
This commit is contained in:
parent
8d74b3062f
commit
4663c13324
@ -16,9 +16,9 @@ Full_Path:
|
|||||||
- Path: C:\Windows\System32\tttracer.exe
|
- Path: C:\Windows\System32\tttracer.exe
|
||||||
- Path: C:\Windows\SysWOW64\tttracer.exe
|
- Path: C:\Windows\SysWOW64\tttracer.exe
|
||||||
Code_Sample:
|
Code_Sample:
|
||||||
- Code:
|
- Code:
|
||||||
Detection:
|
Detection:
|
||||||
- IOC: Parent child relationship. Tttracer parent for executed command
|
- IOC: Parent child relationship. Tttracer parent for executed command
|
||||||
Resources:
|
Resources:
|
||||||
- Link: https://twitter.com/oulusoyum/status/1191329746069655553
|
- Link: https://twitter.com/oulusoyum/status/1191329746069655553
|
||||||
Acknowledgement:
|
Acknowledgement:
|
||||||
|
Loading…
Reference in New Issue
Block a user