Find process with current user permissions

In order to attach to a process in Windows, we need a simple way to check ownership and access permissions. In this case, the TTP checks for Service Hosting Processes (svchost.exe) owned by the current user.
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.


Test this TTP

Download Operator (1.7.1)