GrimResource - Microsoft Management Console for initial access and evasion — Elastic Security Labs
www.elastic.co
Elastic researchers uncovered a new technique, GrimResource, which allows full code execution via specially crafted MSC files. It underscores a trend of well-resourced attackers favoring innovative initial access methods to evade defenses.