CertUtil
Certutil
- 4 paths
- Per-user data
- Version 1.1
- NVISO (@NVISOsecurity), 2thewes
Paths on disk
4 paths
References
3 links
- blog.menasec.net/2019/03/initial-access-execution-evidences-for.html(opens in new tab)
- thinkdfir.com/2020/07/30/certutil-download-artefacts/(opens in new tab)
- github.com/Velocidex/velociraptor/blob/352fec8b9c285b57bb2cc12cb11dc1900f308921/artifacts/definitions/Windows/Forensics/CertUtil.yaml(opens in new tab)