Patchfirst
T1134.002Privilege EscalationStealth

Create Process with Token

Adversaries may create a new process with an existing token to escalate privileges and bypass access controls. Processes can be created with the token and resulting security context of another user using features such as CreateProcessWithTokenW and runas. Creating processes with a token not associated with the current user may require the credentials of the target user, specific privileges to…

attack.mitre.org ↗
CVEs0
In 0
Reports0

Detections

7 Sigma rules tagged T1134.002

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Create Process with Token

0 CVEs, by priority. Each link shows its badge.

No CVEs are linked to this technique yet.

↑ ↓ chooseEnter openEsc close