Skip to content
Threat Feed
Subscribe

Tag

Msdt

2 briefs RSS
high threat

Suspicious Microsoft Diagnostics Wizard Execution

This rule detects potential abuse of the Microsoft Diagnostics Troubleshooting Wizard (MSDT) to proxy malicious command or binary execution via malicious process arguments on Windows systems.

Elastic Defend +2 defense-evasion msdt windows
3r 1t
high advisory

Microsoft Diagnostics Troubleshooting Wizard (MSDT) Proxy Execution Abuse

The Microsoft Diagnostics Troubleshooting Wizard (MSDT) can be abused to proxy malicious command or binary execution via malicious process arguments, potentially leading to defense evasion and arbitrary code execution.

Microsoft Diagnostics Troubleshooting Wizard +1 defense-evasion proxy-execution msdt
2r 3t 1c