Tool
xp_cmdshell
- First Reported
- Jul 17, 2017
- Latest Reported
- Jul 17, 2017
Reported Context (1)
- to successfully transition from database privileges to native command execution. Within MSSQL, the xp_cmdshell feature is ideal for this. However, it’s disabled by default so the attackers had to reconfigure the Attackers Brute-Forced MSSQL, Disabled Antivirus, and Established Persistence
Malware (2)
MITRE ATT&CK (7)
Products (3)
Tools (2)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.