{"Id":"8c2fa9d1-b2b1-4ba1-bad9-60c44c2c20eb","Tags":["t8.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create t8.sys binPath=C:\\windows\\temp\\t8.sys type=kernel && sc.exe start t8.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"t8.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA256":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"d85c6097a2279301222b6a06b93296ace669a76d","SHA256":"258359a7fa3d975620c9810dab3a6493972876a024135feaf3ac8482179b2e79"}}]}