.. /Mftrace.exe
Trace log generation tool for Media Foundation Tools.
Paths:
- C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x86
- C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x64
- C:\Program Files (x86)\Windows Kits\10\bin\x86
- C:\Program Files (x86)\Windows Kits\10\bin\x64
Resources:
Execute
-
Launch cmd.exe as a subprocess of Mftrace.exe.
Mftrace.exe cmd.exe
- Use case
- Local execution of cmd.exe as a subprocess of Mftrace.exe.
- Privileges required
- User
- Operating systems
- Windows
- ATT&CK® technique
- T1127
-
Launch cmd.exe as a subprocess of Mftrace.exe.
Mftrace.exe powershell.exe
- Use case
- Local execution of powershell.exe as a subprocess of Mftrace.exe.
- Privileges required
- User
- Operating systems
- Windows
- ATT&CK® technique
- T1127