Skip to content

Commit c27b264

Browse files
1 parent eddf704 commit c27b264

File tree

1 file changed

+44
-0
lines changed

1 file changed

+44
-0
lines changed

_lolbas/OtherMSBinaries/Logger.md

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
---
2+
Name: Logger.exe
3+
Description: A logging configuration tool from the Windows Kits used to start and manage process logging.
4+
Author: Avihay Eldad
5+
Created: 2025-07-13
6+
Commands:
7+
- Command: logger.exe RUN "{CMD}"
8+
Description: Executes the command specified after the `RUN` parameter as a child of `logger.exe`.
9+
Usecase: Executes an abitrary command via a signed binary to evade detection.
10+
Category: Execute
11+
Privileges: User
12+
MitreID: T1202
13+
OperatingSystem: Windows
14+
Tags:
15+
- Execute: CMD
16+
- Command: logger.exe RUNW "{CMD}"
17+
Description: Executes the command specified after the `RUNW` parameter as a child of `logger.exe`.
18+
Usecase: Executes an abitrary command via a signed binary to evade detection.
19+
Category: Execute
20+
Privileges: User
21+
MitreID: T1202
22+
OperatingSystem: Windows
23+
Tags:
24+
- Execute: CMD
25+
- Command: logger.exe "{CMD}"
26+
Description: Executes the command specified as a child of `logger.exe`.
27+
Usecase: Executes an abitrary command via a signed binary to evade detection.
28+
Category: Execute
29+
Privileges: User
30+
MitreID: T1202
31+
OperatingSystem: Windows
32+
Tags:
33+
- Execute: CMD
34+
Full_Path:
35+
- Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\logger.exe
36+
- Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\logger.exe
37+
- Path: C:\Program Files\Windows Kits\10\Debuggers\x86\logger.exe
38+
- Path: C:\Program Files\Windows Kits\10\Debuggers\x64\logger.exe
39+
Resources:
40+
- Link: https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/logger
41+
Acknowledgement:
42+
- Person: Avihay Eldad
43+
Handle: '@AvihayEldad'
44+
---

0 commit comments

Comments
 (0)