.. / Dxcap.exe
Star

DirectX diagnostics/debugger included with Visual Studio.


Paths:


Resources:
https://twitter.com/harr0ey/status/992008180904419328

Acknowledgement:
Matt harr0ey - @harr0ey


Detection:



Execute

Launch notepad as a subprocess of Dxcap.exe
Dxcap.exe -c C:\Windows\System32\notepad.exe
Usecase:Local execution of a process as a subprocess of Dxcap.exe
Privileges required:User
OS:Windows
Mitre:T1218