File tree Expand file tree Collapse file tree 1 file changed +44
-0
lines changed
Expand file tree Collapse file tree 1 file changed +44
-0
lines changed Original file line number Diff line number Diff line change 1+ ---
2+ Name : Logger.exe
3+ Description : A logging configuration tool from the Windows Kits used to start and manage process logging.
4+ Author : Avihay Eldad
5+ Created : 2025-07-13
6+ Commands :
7+ - Command : logger.exe RUN "{CMD}"
8+ Description : Executes the command specified after the `RUN` parameter as a child of `logger.exe`.
9+ Usecase : Executes an abitrary command via a signed binary to evade detection.
10+ Category : Execute
11+ Privileges : User
12+ MitreID : T1202
13+ OperatingSystem : Windows
14+ Tags :
15+ - Execute : CMD
16+ - Command : logger.exe RUNW "{CMD}"
17+ Description : Executes the command specified after the `RUNW` parameter as a child of `logger.exe`.
18+ Usecase : Executes an abitrary command via a signed binary to evade detection.
19+ Category : Execute
20+ Privileges : User
21+ MitreID : T1202
22+ OperatingSystem : Windows
23+ Tags :
24+ - Execute : CMD
25+ - Command : logger.exe "{CMD}"
26+ Description : Executes the command specified as a child of `logger.exe`.
27+ Usecase : Executes an abitrary command via a signed binary to evade detection.
28+ Category : Execute
29+ Privileges : User
30+ MitreID : T1202
31+ OperatingSystem : Windows
32+ Tags :
33+ - Execute : CMD
34+ Full_Path :
35+ - Path : C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\logger.exe
36+ - Path : C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\logger.exe
37+ - Path : C:\Program Files\Windows Kits\10\Debuggers\x86\logger.exe
38+ - Path : C:\Program Files\Windows Kits\10\Debuggers\x64\logger.exe
39+ Resources :
40+ - Link : https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/logger
41+ Acknowledgement :
42+ - Person : Avihay Eldad
43+ Handle : ' @AvihayEldad'
44+ ---
You can’t perform that action at this time.
0 commit comments