Control Panel Items¶
Windows Control Panel items are utilities that allow users to view and adjust computer settings. Adversaries can use Control Panel items as execution payloads to execute arbitrary commands.
| id: | 3b9bbf6b-dde2-4f82-b1ad-b3b625f44a26 |
|---|---|
| categories: | enrich |
| confidence: | low |
| os: | windows |
| created: | 7/26/2019 |
| updated: | 7/26/2019 |
MITRE ATT&CK™ Mapping¶
| tactics: | Defense Evasion, Execution |
|---|---|
| techniques: | T1196 Control Panel Items |
Query¶
process where subtype.create and
process_name in ("control.exe", "rundll32.exe") and
command_line == "*.cpl *"