zwShell — graph view

6 connected entities within 1 hop.

Path finder

Find the shortest connection between this entity and any other in the graph.

Technique

zwShell T1053.005: Scheduled Task T1033: System Owner/User Discovery T1543.003: Windows Service T1082: System Information Discovery T1021.002: SMB/Windows Admin Shares T1112: Modify Registry