.. /XBootMgr.exe
Star

Execute (EXE)

Windows Performance Toolkit binary used to start performance traces.

Paths:

Resources:

Acknowledgements:

Execute

  1. Executes an executable after the trace is complete using the callBack parameter.

    xbootmgr.exe -trace "{boot|hibernate|standby|shutdown|rebootCycle}" -callBack {PATH:.exe}
    Use case
    Executes code as part of post-trace automation flow.
    Privileges required
    Administrator
    Operating systems
    Windows
    ATT&CK® technique
    T1202
    Tags
    Execute: EXE

  2. Executes an executable before each trace run using the preTraceCmd parameter.

    xbootmgr.exe -trace "{boot|hibernate|standby|shutdown|rebootCycle}" -preTraceCmd {PATH:.exe}
    Use case
    Executes code as part of pre-trace automation or staging.
    Privileges required
    Administrator
    Operating systems
    Windows
    ATT&CK® technique
    T1202
    Tags
    Execute: EXE