Robuta

https://attack.mitre.org/techniques/T1546/011/ Event Triggered Execution: Application Shimming, Sub-technique T1546.011 - Enterprise | MITRE... event triggered executionapplicationshimming