examples:

• description: "Load the kernel driver" command: "sc.exe create amsdk binPath=C:\\windows\\temp\\amsdk.sys type=kernel && sc.exe start amsdk"
• description: "Exploit the driver for privilege escalation" command: "Exploit.exe --driver amsdk.sys"

amsdk.sys

Vulnerable WatchDog Antimalware driver used by Silver Fox APT group to load unsigned drivers and execute malicious code in kernel mode

Use Case: Elevate privileges

Required Privileges: kernel

MITRE ATT&CK: T1068

Variants: 2 known variants