Rule Info
Tags
attack.execution DEMO attack.t1059.003
Modified
None
Author
frack113, Nasreddine Bencherchali (Nextron Systems)
Name
Read Contents From Stdin Via Cmd.EXE
Description
Detect the use of "<" to read and potentially execute a file via cmd.exe
Date
2023-03-07 00:00:00
Id
241e802a-b65e-484f-88cd-c2dc10f9206d
Type
Community Rule
Link to Public Repo
Rule History
Commit
Date
Author
Title
Scan your endpoints, forensic images or collected files with our portable scanner THOR