ATT&CKReferencesRussinovich Sysinternals

Russinovich Sysinternals

Russinovich, M. (2014, May 2). Windows Sysinternals PsExec v2.11. Retrieved May 13, 2015.

Open the source

Techniques1

Groups0

None recorded.

Software1

Campaigns0

None recorded.

Procedure examples2

TechniqueUsed byProcedure example
T1543.003
Windows Service
ToolPsExec

PsExec can leverage Windows services to escalate privileges from administrator to SYSTEM with the -s argument.

T1569.002
Service Execution
ToolPsExec

Microsoft Sysinternals PsExec is a popular administration tool that can be used to execute binaries on remote systems using a temporary Windows service.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.