https://lolbas-project.github.io/lolbas/Binaries/Mmc/
Mmc | LOLBAS
Mmc.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
mmclolbas
https://lolbas-project.github.io/lolbas/Scripts/Manage-bde/
Manage Bde | LOLBAS
Manage-bde.wsf is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
managebdelolbas
https://lolbas-project.github.io/lolbas/OtherMSBinaries/Teams/
Teams | LOLBAS
Teams.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
teamslolbas
https://www.paloaltonetworks.com/blog/tag/lolbas/
LOLBAS Blogs | Palo Alto Networks
Read the latest blogs and insights about LOLBAS from Palo Alto Networks experts.
palo altololbasblogsnetworks
https://lolbas-project.github.io/
LOLBAS
lolbas
https://saulpanders.github.io/2022/01/02/New-Year-New-LOLBAS.html
New Year, New LOLBAS? | Yet Another Blog
Jan 2, 2022 - Abusing Windows Package Manager tool winget.exe
new yearyet anotherlolbasblog
https://lolbas-project.github.io/lolbas/Binaries/Sftp/
Sftp | LOLBAS
Sftp.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
sftplolbas
https://lolbas-project.github.io/lolbas/Scripts/CL_mutexverifiers/
Cl_mutexverifiers | LOLBAS
CL_Mutexverifiers.ps1 is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
cllolbas
https://lolbas-project.github.io/lolbas/Libraries/Shimgvw/
Shimgvw | LOLBAS
Shimgvw.dll is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
lolbas
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Analytics-Alert-Reference-by-Alert-name/LOLBAS-executable-injects-into-another-process?contentId=qlYlRRxMGjFa4fLdS3b8xA
LOLBAS executable injects into another process
Synopsis Activation Period 14 Days Training Period 30 Days Test Period N/A (single event) Deduplication Period 1 Day Required Data Requires: XDR Agent...
into anotherlolbasexecutableinjectsprocess
https://lolbas-project.github.io/lolbas/OtherMSBinaries/Vshadow/
Vshadow | LOLBAS
Vshadow.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
lolbas
https://me-en.kaspersky.com/blog/tag/lolbas/
Tag: LOLBAS | Kaspersky official blog
taglolbaskasperskyofficialblog
https://lolbas-project.github.io/lolbas/Binaries/Ieexec/
Ieexec | LOLBAS
Ieexec.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
lolbas
https://lolbas-project.github.io/lolbas/OtherMSBinaries/OpenConsole/
Openconsole | LOLBAS
OpenConsole.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
lolbas
https://lolbas-project.github.io/lolbas/Binaries/Mavinject/
Mavinject | LOLBAS
Mavinject.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
lolbas
https://lolbas-project.github.io/lolbas/OtherMSBinaries/Devinit/
Devinit | LOLBAS
Devinit.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
lolbas
https://lolbas-project.github.io/lolbas/Binaries/Tar/
Tar | LOLBAS
Tar.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.
tarlolbas