{"Id":"be4843ef-a2a8-4a0d-91c6-42e165800bb0","Tags":["TestBone.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create TestBone.sys binPath=C:\\windows\\temp\\TestBone.sys type=kernel && sc.exe start TestBone.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"TestBone.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA256":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"0d523e8b0b96675ac2e5ac0d56c367564b260545","SHA256":"0de4247e72d378713bcf22d5c5d3874d079203bb4364e25f67a90d5570bdcce8"}}]}