Skip to main content
Artifacts Generated: Process Create, Process Inject, Process Kill

Summary

Execute PowerShell commands as post-exploitation job. This command will import the most recently registered *.ps1 file registered using register_file and import it into the PowerShell runspace before execution.

Arguments (Positional)

command

PowerShell command to be executed.

Usage

powerpick [command]
powerpick -Command [command]

MITRE ATT&CK Mapping

  • T1059
  • T1562