<<< Hide Navigation Hide TOC >>>
Indirect Command Execution By Program Compatibility Wizard (b97cd4b1-30b8-4a9d-bd72-6293928d52bc)
Detect indirect command execution via Program Compatibility Assistant pcwrun.exe
Cluster A![]() |
Galaxy A![]() |
Cluster B![]() |
Galaxy B![]() |
Level![]() |
---|---|---|---|---|
System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) | Attack Pattern | Indirect Command Execution By Program Compatibility Wizard (b97cd4b1-30b8-4a9d-bd72-6293928d52bc) | Sigma-Rules | 1 |