Driver can be used to load unsigned drivers
sc.exe create ksapi.sys binPath=C:\windows\temp\ksapi.sys type=kernel && sc.exe start ksapi.sys sc.exe create ksapi.sys binPath=C:\windows\temp\ksapi.sys type=kernel && sc.exe start ksapi.sys Sandbox: execFile · Timeout: 30s
security.privilegeescalation.kernel-exploit examples:
Driver can be used to load unsigned drivers
Use Case: Elevate privileges
Required Privileges: kernel
MITRE ATT&CK: T1068
Variants: 2 known variants