Skip to content
Threat Feed
Subscribe

Tag

Attack.t1127

1 brief RSS
medium advisory

Microsoft SQL Server: Potential execution via sqltoolsps.exe

The sqltoolsps.exe utility, a component of Microsoft SQL Server Management Studio, can be used to execute PowerShell code. Script blocks are not logged in this case, allowing this utility to bypass protection mechanisms based on log analysis.

attack.execution attack.stealth attack.t1059.001 attack.t1127
1r