ATT&CK ReferencesDemaske Netsh Persistence

Demaske Netsh Persistence

Demaske, M. (2016, September 23). USING NETSHELL TO EXECUTE EVIL DLLS AND PERSIST ON A HOST. Retrieved April 8, 2017.

Techniques1

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1546.007 Netsh Helper DLL	Toolnetsh	netsh can be used as a persistence proxy technique to execute a helper DLL when netsh.exe is executed. Demaske Netsh Persistence

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.