T1216.001 System Script Proxy Execution: PubPrn

Adversaries may use PubPrn to proxy execution of malicious remote files. MITRE ATT&CK

1 program on CmdID 2 Sigma rules T1216.001 on attack.mitre.org

Part of

MITRE ATT&CK

T1216System Script Proxy Execution

documented by LOLBAS and GTFOBins, or named by its rules

process creation, the highest levels first

mediumLaunch-VsDevShell.PS1 Proxy ExecutionNasreddine Bencherchali (Nextron Systems) · Windows