.. /Sqlps.exe
Star

Execute

Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons.


Paths:

Resources:
Acknowledgements:

Detection:

Execute

  1. Run a SQL Server PowerShell mini-console without Module and ScriptBlock Logging.

    Sqlps.exe -noprofile
    Use case
    Execute PowerShell commands without ScriptBlock logging.
    Privileges required
    User
    Operating systems
    Windows
    ATT&CK® technique
    T1218