Found via RichPEHeaderHash pivoting.
sc.exe create NQrmq.sys binPath=C:\windows\temp\NQrmq.sys type=kernel && sc.exe start NQrmq.sys sc.exe create NQrmq.sys binPath=C:\windows\temp\NQrmq.sys type=kernel && sc.exe start NQrmq.sys Sandbox: execFile · Timeout: 30s
security.privilegeescalation.kernel-exploit examples:
Found via RichPEHeaderHash pivoting.
Use Case: Elevate privileges
Required Privileges: kernel
MITRE ATT&CK: T1068