11 lines
274 B
Markdown
11 lines
274 B
Markdown
|
## Logon Scripts
|
||
|
|
|
||
|
|
MITRE ATT&CK Technique: [T1037](https://attack.mitre.org/wiki/Technique/T1037)
|
||
|
|
|
||
|
|
|
||
|
|
Input:
|
||
|
|
|
||
|
|
Add path and any command line variables--
|
||
|
|
|
||
|
|
REG.exe ADD HKCU\Environment /v UserInitMprLogonScript /t REG_MULTI_SZ /d "<path of evil> <commandline switch of evil>"
|