LOLBAS icon indicating copy to clipboard operation
LOLBAS copied to clipboard

Add new function - Tamper

Open bohops opened this issue 3 years ago • 1 comments

'Tamper' is a function that better describes certain lolbin functionality. At least 2 lolbins are noted:

  • fltmc.exe
  • fsutil.exe (prospective)

There may be others.

bohops avatar Nov 06 '21 03:11 bohops

Explore "uninstall security software" use case for msiexec.exe

bohops avatar Nov 09 '21 03:11 bohops

Added 'tamper' and 'conceal' in LOLBAS-Project/LOLBAS-Project.github.io@d9405c164630633bbbe7332bb75e5595d8f8d2c0 . A category for uninstalling security software seems to be in line with 'Tamper'? Closing this issue for now, feel free to reopen

wietze avatar Oct 04 '22 14:10 wietze