Hide Navigation Hide TOC

Powershell Install a DLL in System Directory (63bf8794-9917-45bc-88dd-e1b5abc0ecfd)

Uses PowerShell to install/copy a file into a system directory such as "System32" or "SysWOW64"

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Password Filter DLL - T1556.002 (3731fbcd-0e43-47ae-ae6c-d15e510f0d42)	Attack Pattern	Powershell Install a DLL in System Directory (63bf8794-9917-45bc-88dd-e1b5abc0ecfd)	Sigma-Rules	1
Modify Authentication Process - T1556 (f4c1826f-a322-41cd-9557-562100848c84)	Attack Pattern	Password Filter DLL - T1556.002 (3731fbcd-0e43-47ae-ae6c-d15e510f0d42)	Attack Pattern	2