.. /CL_Invocation.ps1
Star

Execute

Aero diagnostics script


Paths:

Resources:
Acknowledgements:

Detection:

Execute

  1. Import the PowerShell Diagnostic CL_Invocation script and call SyncInvoke to launch an executable.

    . C:\Windows\diagnostics\system\AERO\CL_Invocation.ps1   \nSyncInvoke <executable> [args]
    Use case
    Proxy execution
    Privileges required
    User
    Operating systems
    Windows 10
    ATT&CK® technique
    T1216