.. /Mftrace.exe
Trace log generation tool for Media Foundation Tools.
Paths:
- C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x86
- C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x64
- C:\Program Files (x86)\Windows Kits\10\bin\x86
- C:\Program Files (x86)\Windows Kits\10\bin\x64
Resources:
Execute
Launch cmd.exe as a subprocess of Mftrace.exe.
Mftrace.exe cmd.exe
Usecase: Local execution of cmd.exe as a subprocess of Mftrace.exe.
Privileges required: User
OS: Windows
MITRE ATT&CK®: T1127
Launch cmd.exe as a subprocess of Mftrace.exe.
Mftrace.exe powershell.exe
Usecase: Local execution of powershell.exe as a subprocess of Mftrace.exe.
Privileges required: User
OS: Windows
MITRE ATT&CK®: T1127