LOLBAS
ID: 666fa6f5-4b20-5286-918c-152ad52052a1
STIX ID: identity--666fa6f5-4b20-5286-918c-152ad52052a1
LOLBAS (Living Off The Land Binaries and Scripts) catalogs legitimate Windows binaries, scripts, and libraries that can be abused by adversaries for execution, download, bypass, and other attack techniques. This processor publishes dated procedure records for each documented binary/command pairing, along with related file, process, directory, operating system, and ATT&CK technique context to support detection engineering and threat hunting.