Tool
StandIn
- First Reported
- Apr 25, 2026
- Latest Reported
- Apr 25, 2026
Reported Context (1)
- Using BloodHound to discover writable GPOs and tools like pyGPOAbuse, SharpGPOAbuse, and StandIn, the attacker creates persistent local administrators and interactive reverse shells, while defenders are advised to treat Lab Walkthrough Demonstrates Active Directory GPO Abuse and Defenses
MITRE ATT&CK (7)
Products (2)
Tools (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.