THM: Investigating Windows 2.0
Ref:
Task 1 - Introduction
- What registry key contains the same command that is executed within a scheduled task?
- What analysis tool will immediately close if/when you attempt to launch it?
Procexp64
Creating a new environment variable with a path from Desktop
This post is licensed under CC BY 4.0 by the author.