Driver categorized as POORTRY by Mandiant.
sc.exe create 2.sys binPath=C:\windows\temp\2.sys type=kernel && sc.exe start 2.sys sc.exe create 2.sys binPath=C:\windows\temp\2.sys type=kernel && sc.exe start 2.sys Sandbox: execFile · Timeout: 30s
security.privilegeescalation.kernel-exploit examples:
Driver categorized as POORTRY by Mandiant.
Use Case: Elevate privileges
Required Privileges: kernel
MITRE ATT&CK: T1068
Variants: 2 known variants