Finger.exe Copied to Temp Directory

Ibrahim Saud@tektrix

•updated Jun 17, 2026•0•0•2

Detects the native utility finger.exe being copied to a temporary directory using cmd.exe, which can be an indicator of Living Off The Land Binaries (LOLBins) abuse.