{"Id":"a5792a63-ba77-44ac-bd4a-134b24b01033","Tags":["1.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create 1.sys binPath=C:\\windows\\temp\\1.sys type=kernel && sc.exe start 1.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"1.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA256":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"f50b475d5fd1ed4f866bf43342676e449f779c67","SHA256":"64f9e664bc6d4b8f5f68616dd50ae819c3e60452efd5e589d6604b9356841b57"}}]}