attack.t1134.003

HackTool - Impersonate Execution

Apr 28, 2026 · attack.privilege-escalation attack.stealth attack.t1134.001 attack.t1134.003 ·

Detects execution of the Impersonate tool. Which can be used to manipulate tokens on a Windows computers remotely (PsExec/WmiExec) or interactively

HackTool - SharpDPAPI Execution

Apr 28, 2026 · attack.privilege-escalation attack.stealth attack.t1134.001 attack.t1134.003 ·

Share on:

Detects the execution of the SharpDPAPI tool based on CommandLine flags and PE metadata. SharpDPAPI is a C# port of some DPAPI functionality from the Mimikatz project.

HackTool - SharpImpersonation Execution

Apr 28, 2026 · attack.privilege-escalation attack.stealth attack.t1134.001 attack.t1134.003 ·

Share on:

Detects execution of the SharpImpersonation tool. Which can be used to manipulate tokens on a Windows computers remotely (PsExec/WmiExec) or interactively