mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-27 12:42:19 +02:00
Remaping NTDS entries to T1003.003
This commit is contained in:
@@ -44,7 +44,7 @@ Commands:
|
||||
Usecase: Copy/extract a locked file such as the AD Database
|
||||
Category: Copy
|
||||
Privileges: Admin
|
||||
MitreID: T1003
|
||||
MitreID: T1003.003
|
||||
OperatingSystem: Windows 10, Windows 2016 Server, Windows 2019 Server
|
||||
Full_Path:
|
||||
- Path: C:\Windows\System32\esentutl.exe
|
||||
|
Reference in New Issue
Block a user