Unix2 abuse funcs

systemd-runsystemd-run

Platform
Unix
Abuse functions
2

Description

systemd-run is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE crosswalk): T1059. Defenders should monitor execution of systemd-run under non-administrative or sudo contexts and alert when its arguments match the abuse-function signatures.

Abuse functions· 2

command
sudo
shell
sudo

Abuses1

TypeTargetConfidenceTier
TechniqueCommand and Scripting Interpretert105990%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

LOLbin
systemctl
LOLbin
runscript
LOLbin
run-parts
LOLbin
start-stop-daemon
LOLbin
systemd-resolve
LOLbin
sysctl
Sourced from GTFOBins. Curated by Adam Lundqvist, SQUR.