2.1 | SOC Tier 2 | Understanding PsExec

Lesson Description

A step back to understand PsExec: how it works step by step over SMB, RPC and named pipes, how it runs commands by creating services on the target, why admins use it and attackers abuse it, and the difference between user, system and service processes in Windows. Resources: PsExec (learn.microsoft.com/sysinternals/downloads/psexec)

Enroll in Chasing Rider to unlock the full curriculum.