sk Skill · meltedinhex
hunting-lolbin-abuse-on-windows
Hunts for living-off-the-land binary (LOLBin) abuse in Windows process-creation telemetry by flagging trusted system binaries used with download, execution-proxy, or encoded-command arguments. Activates for requests to hunt LOLBins, detect signed-binary proxy execution, or find suspicious certutil/mshta/regsvr32 usage.
Open on skills.sh ↗read 2026-09-15
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 0
bashsysmondefense-evasionPythonprocess-creationlolbinthreat-hunting
- Host repository
- meltedinhex/analyst-ai-pack
- Version
- 1.0.0
- Licence
- Apache-2.0
- Host stars
- 22
- Host language
- Python