Michael Haag
20 lines
415 B
Markdown
20 lines
415 B
Markdown
# Service Installation
|
|
|
|
MITRE ATT&CK Technique: [T1050](https://attack.mitre.org/wiki/Technique/T1050)
|
|
|
|
## sc.exe
|
|
|
|
Input:
|
|
|
|
sc create TestService binPath="C:\Path\file.exe"
|
|
|
|
|
|
## PowerShell
|
|
|
|
Input:
|
|
|
|
powershell New-Service -Name "TestService" -BinaryPathName "C:\Path\file.exe"
|
|
|
|
## Test Script
|
|
[AtomicService.cs](https://github.com/redcanaryco/atomic-red-team/blob/master/Windows/Payloads/AtomicService.cs)
|