public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-26 06:49:09 +01:00
Code Issues Projects Releases Wiki Activity

Added Dump example to TTTracer.exe

Browse Source
This commit is contained in:
Oddvar Moe 2019-11-18 12:50:49 +01:00
parent e0db5721ff
commit 94a295213e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
yml/OSBinaries/Tttracer.yml
View File

@ -12,7 +12,7 @@ Commands:
MitreID: T1218 MitreID: T1218
MitreLink: https://attack.mitre.org/wiki/Technique/T1218 MitreLink: https://attack.mitre.org/wiki/Technique/T1218
OperatingSystem: Windows 10 1809 and newer OperatingSystem: Windows 10 1809 and newer
- Command: TTTracer.exe -dumpFull -attach <lsass_pid> - Command: TTTracer.exe -dumpFull -attach pid
Description: Dumps process using tttracer.exe. Requires administrator privileges Description: Dumps process using tttracer.exe. Requires administrator privileges
Usecase: Dump process by PID Usecase: Dump process by PID
Category: Dump Category: Dump