PS Exec

Definitions

1. A common reference to PsExec, a Microsoft Sysinternals tool that allows remote command execution on Windows systems using administrative credentials and service-based execution. It is widely used by administrators for legitimate management and by attackers for lateral movement, making context critical in detection.

   In plain English: A Windows remote-execution tool often used by admins and attackers alike.

   Example: "The red team used PS Exec after obtaining admin rights, blending into a tool many Windows administrators already trusted."

Related Terms

• Execution Policy
• Active Directory
• Bitlocker
• Group Policy
• Kerberos
• Living off the Land
• NTLM
• Pass the Hash
• Pass the Ticket
• Micro-Segmentation