Read Contents From Stdin Via Cmd.EXE

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•12

Detects the use of `cmd.exe` to read content from standard input using the `<` redirection operator. This technique can be used by adversaries to execute commands or scripts from a file, effectively piping the file's content as input to `cmd.exe`.