--- Name: vsjitdebugger.exe Description: Just-In-Time (JIT) debugger included with Visual Studio Author: 'Oddvar Moe' Created: '2018-05-25' Commands: - Command: Vsjitdebugger.exe calc.exe Description: Executes calc.exe as a subprocess of Vsjitdebugger.exe. Usecase: Execution of local PE file as a subprocess of Vsjitdebugger.exe. Category: Execute Privileges: User MitreID: T1218 MitreLink: https://attack.mitre.org/wiki/Technique/T1218 OperatingSystem: Windows Full Path: - Path: c:\windows\system32\vsjitdebugger.exe Code Sample: - Code: Detection: - IOC: Resources: - Link: https://twitter.com/pabraeken/status/990758590020452353 Acknowledgement: - Person: Pierre-Alexandre Braeken Handle: '@pabraeken' ---