Robuta

https://attack.mitre.org/techniques/T1218/007/ System Binary Proxy Execution: Msiexec, Sub-technique T1218.007 - Enterprise | MITRE ATT&CKĀ® system binary proxy executionmsiexecsubtechniquet1218 https://lolbas-project.github.io/lolbas/Binaries/Msiexec/ Msiexec | LOLBAS Msiexec.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases. msiexec https://docs.chocolatey.org/en-us/community-repository/moderation/package-validator/rules/cpmr0066/ Chocolatey Software Docs | CPMR0066 - Usage of msiexec (script) Information on how to remediate the Chocolatey Package Moderation Rule 0066 software docschocolateyusagemsiexecscript https://attack.mitre.org/detectionstrategies/DET0158/ Detection of Msiexec Abuse for Local, Network, and DLL Execution, Detection Strategy DET0158 |... local network