Chains
TTPs
Blog
Login
Prelude TTP browser
Image File Execution Options: Silent Process Exit Injection
Tactic:
Persistence
Community
This is a community level chain. Download Prelude Operator to use this chain for free.
This procedure creates the registry keys and values required to enabled the FLG_MONITOR_SILENT_PROCESS_EXIT IFEO Global Flag which execute the Pneuma agent when Notepad exits normally.
View Command
You must be logged in to view this TTPs command.
Login
Authors
traceflow
Tactic
Persistence
Test this TTP
Download Operator (1.7.1)