PowerSploit PsExec for PowerShell

Overview of PowerSploit PsExec

PowerSploit PowerShell script (Invoke-PsExec.ps1) from Empire is a function (cmdlet) that lets you execute PowerShell and batch/cmd.exe code asynchronously on target Windows computers, using PsExec.exe.

References

• https://github.com/EmpireProject/Empire/blob/master/data/module_source/lateral_movement/Invoke-PsExec.ps1

Tags

Categories: Threats + Use Case, Use Cases

APT33, APT41, Defense Evasion, Execution, Lateral Movement, menuPass, MuddyWater, Patchwork, PowerShell, Splunk, Use Cases