examples:

• description: "Load the kernel driver" command: "sc.exe create wamsdk binPath=C:\\windows\\temp\\wamsdk.sys type=kernel && sc.exe start wamsdk"
• description: "Exploit the driver for privilege escalation" command: "Exploit.exe --driver wamsdk.sys"

wamsdk.sys

Vulnerable WatchDog Antimalware driver used by Silver Fox APT group to load unsigned drivers and execute malicious code in kernel mode

Use Case: Elevate privileges

Required Privileges: kernel

MITRE ATT&CK: T1068