Product
medium
advisory
Signed Proxy Execution via MS Work Folders
2 rules 3 TTPs 1 IOCAdversaries may misuse Windows Work Folders to execute a masqueraded 'control.exe' file from a non-standard location, bypassing application controls and potentially escalating privileges.
Windows Work Folders
defense-evasion
masquerading
workfolders
windows
2r
3t
1i
medium
advisory
Signed Proxy Execution via MS Work Folders
2 rules 3 TTPsAttackers can abuse Windows Work Folders to execute a masqueraded control.exe file from untrusted locations, potentially bypassing application controls for defense evasion and privilege escalation.
Windows Work Folders +3
defense-evasion
masquerading
windows
2r
3t