Skip to content
Threat Feed
Subscribe

Tag

Sc-Exe

1 brief RSS
high advisory

Service Security Descriptor Tampering via Sc.exe

Adversaries can exploit the Windows 'sc.exe' utility to modify service Discretionary Access Control Lists (DACLs) via the 'sdset' command, facilitating privilege escalation and persistence by granting unauthorized service access.

privilege-escalation persistence windows security-descriptor sc-exe
1r 1t