LOLBAS Feed (v1.0.29)
"Living off the land binaries" is a term used to describe malware or hacking techniques that take advantage of legitimate tools.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Data Enrichment & Threat Intelligence
Integrations (1)
- LOLBAS Feed
Playbooks (2)
- Compare Process Execution Arguments To LOLBAS Patterns
- Search LOLBAS Tools By Name
README
Living off the land binaries” is a term used to describe malware or hacking techniques that take advantage of legitimate
tools and processes that are already present on a computer or network, rather than introducing new malware or malicious
code. The goal is to blend in with normal activity and avoid detection. Examples of this include using built-in Windows
commands to move laterally through a network, or using scripting languages that are commonly installed on a system to
execute malicious code. LOLBAS project is documenting binaries, scripts, and libraries that can be used for Living Off
The Land techniques.