Meta tags:
description=OpenConsole.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.;

Headings (most frequently used words):

openconsole, exe, star, execute, paths, resources, acknowledgements, detections,

Text of the page (most frequently used words):
exe (12), openconsole (10), microsoft (7), #execute (4), windows (4), program (4), files (4), terminal (4), visual (3), studio (3), community (3), common7 (3), ide (3), commonextensions (3), servicehub (3), use (2), process (2), sigma (2), https (2), com (2), nas_bench (2), os64 (2), x86 (2), 2019 (2), tags, t1202, att, technique, operating, systems, user, privileges, required, proxy, binary, evade, defensive, counter, measures, case, path, specified, with, parent, github, sigmahq, blob, 9e0ef7251b075f15e7abafbbec16d3230c5fa477, rules, process_creation, proc_creation_win_lolbin_openconsole, yml, ioc, spawning, unexpected, processes, detections, nasreddine, bencherchali, acknowledgements, twitter, status, 1537563834478645252, resources, windowsapps, windowsterminal_1, 10301, 0_x64__8wekyb3d8bbwe, 2022, os86, paths, console, window, host, for, star, lolbas,

Text of the page (random words):
openconsole lolbas openconsole exe star execute exe console window host for windows terminal paths c program files x86 microsoft visual studio 2019 community common7 ide commonextensions microsoft terminal servicehub os64 openconsole exe c program files x86 microsoft visual studio 2019 community common7 ide commonextensions microsoft terminal servicehub os86 openconsole exe c program files microsoft visual studio 2022 community common7 ide commonextensions microsoft terminal servicehub os64 openconsole exe c program files windowsapps microsoft windowsterminal_1 18 10301 0_x64__8wekyb3d8bbwe openconsole exe resources https twitter com nas_bench status 1537563834478645252 acknowledgements nasreddine bencherchali nas_bench detections ioc openconsole exe spawning unexpected processes sigma https github com sigmahq sigma blob 9e0ef7251b075f15e7abafbbec16d3230c5fa477 rules windows process_creation proc_creation_win_lolbin_openconsole yml execute execute specified process with openconsole exe as parent process openconsole exe path exe use case use openconsole exe as a proxy binary to evade defensive counter measures privileges required user operating systems windows 10 windows 11 att ck technique t1202 tags execute exe