.. /SQLToolsPS.exe

Star

Tool included with Microsoft SQL that loads SQL Server cmdlts. A replacement for sqlps.exe. Successor to sqlps.exe in SQL Server 2016+.

• https://twitter.com/pabraeken/status/993298228840992768
• https://docs.microsoft.com/en-us/sql/powershell/sql-server-powershell?view=sql-server-2017

Execute

1. Run a SQL Server PowerShell mini-console without Module and ScriptBlock Logging.

   SQLToolsPS.exe -noprofile -command Start-Process calc.exe

   Use case

   Execute PowerShell command.

   Privileges required

   User

   Operating systems

   Windows

   ATT&CK® technique

   T1218