attack.t1574.005 | Detection.FYI

HackTool - SharpUp PrivEsc Tool Execution

Apr 28, 2026 · attack.persistence attack.privilege-escalation attack.discovery attack.execution attack.stealth attack.t1615 attack.t1569.002 attack.t1574.005 ·
Share on:

Detects the use of SharpUp, a tool for local privilege escalation

Read More
Setup16.EXE Execution With Custom .Lst File

Apr 28, 2026 · attack.privilege-escalation attack.persistence attack.execution attack.stealth attack.t1574.005 ·
Share on:

Detects the execution of "Setup16.EXE" and old installation utility with a custom ".lst" file. These ".lst" file can contain references to external program that "Setup16.EXE" will execute. Attackers and adversaries might leverage this as a living of the land utility.

Read More