mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-10-14 09:25:07 +02:00
Create Pixtool.yml (#463)
Co-authored-by: Wietze <wietze@users.noreply.github.com>
This commit is contained in:
23
yml/OtherMSBinaries/Pixtool.yml
Normal file
23
yml/OtherMSBinaries/Pixtool.yml
Normal file
@@ -0,0 +1,23 @@
|
|||||||
|
---
|
||||||
|
Name: Pixtool.exe
|
||||||
|
Description: Command line utility for taking and analyzing PIX GPU captures.
|
||||||
|
Author: Avihay Eldad
|
||||||
|
Created: 2025-09-21
|
||||||
|
Commands:
|
||||||
|
- Command: pixtool.exe launch {PATH_ABSOLUTE:.exe}
|
||||||
|
Description: Launches an executable via PIX command-line utility.
|
||||||
|
Usecase: Executes an executable under a trusted, Microsoft signed binary.
|
||||||
|
Category: Execute
|
||||||
|
Privileges: User
|
||||||
|
MitreID: T1127
|
||||||
|
OperatingSystem: Windows
|
||||||
|
Tags:
|
||||||
|
- Execute: EXE
|
||||||
|
Full_Path:
|
||||||
|
- Path: C:\Program Files\Microsoft PIX\pixtool.exe
|
||||||
|
- Path: C:\Program Files (x86)\Microsoft PIX\pixtool.exe
|
||||||
|
Resources:
|
||||||
|
- Link: https://devblogs.microsoft.com/pix/pixtool/
|
||||||
|
Acknowledgement:
|
||||||
|
- Person: Avihay Eldad
|
||||||
|
Handle: '@AvihayEldad'
|
Reference in New Issue
Block a user