Rule Info
Name
Read Contents From Stdin Via Cmd.EXE
Author
frack113, Nasreddine Bencherchali (Nextron Systems)
Description
Detect the use of "<" to read and potentially execute a file via cmd.exe
Date
2023-03-07 00:00:00
Modified
None
Id
241e802a-b65e-484f-88cd-c2dc10f9206d
Tags
attack.execution attack.t1059.003 DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR