Skip to content
Threat Feed
Subscribe

Product

Windows Performance Toolkit

1 brief RSS
medium advisory

Suspicious Child Process Execution via XBootMgrSleep.exe

Detection of potentially unauthorized process execution using the Microsoft-signed Windows Performance Toolkit utility XBootMgrSleep.exe to bypass security controls.

Windows Performance Toolkit living-off-the-land execution windows-performance-toolkit
1r 1t