S0645 Wevtutil

toolEnterprise

platformsWindows

also known asWevtutil

Wevtutil is a Windows command-line utility that enables administrators to retrieve information about event logs and publishers.

techniques used (3)

ATT&CK techniques this enables or maps to.

Threat groups associated with this.

Campaigns that use this.

Where this definition is published.

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.