Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Pluralsight

Volt Typhoon: T1059.003 Command and Scripting Interpreter Emulation

via Pluralsight

Overview

Explore how Volt Typhoon abused command and scripting interpreters to execute commands, scripts, and binaries in critical infrastructure networks.

Volt Typhoon abused various command and scripting interpreters, such as PowerShell and the Windows Command Shell, as a way to execute arbitrary commands for the purpose of host and network enumeration, establishing command and control infrastructure, and evading defenses. In this course, Volt Typhoon: T1059.003 Command and Scripting Interpreter Emulation, you’ll focus specifically on how Volt Typhoon used the Windows Command Shell to gather information about hosts, users, and wider network information after gaining initial access to critical infrastructure networks. The commands they used are commonly used by system administrators on a day to day basis, so it was an incredibly stealthy technique that allowed Volt Typhoon to remain hidden within the networks for several years.

Syllabus

  • Volt Typhoon: T1059.003 Command and Scripting Interpreter Emulation 6mins

Taught by

Matthew Lloyd Davies

Reviews

Start your review of Volt Typhoon: T1059.003 Command and Scripting Interpreter Emulation

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.