CmdID

CmdID / Techniques / T1218

T1218.014 System Binary Proxy Execution: MMC

Adversaries may abuse mmc.exe to proxy execution of malicious .msc files. MITRE ATT&CK

1 program on CmdID 1 Sigma rule T1218.014 on attack.mitre.org

Part of

MITRE ATT&CK
T1218System Binary Proxy Execution

Programs for it

documented by LOLBAS and GTFOBins, or named by its rules
mmc.exeExecute

Sigma rules tagged with it

process creation, the highest levels first
highMMC Executing Files with Reversed Extensions Using RTLO AbuseSwachchhanda Shrawan Poudel (Nextron Systems) · Windows