LOLBAS
ID: f58c783d-6ade-5c30-aa75-02abbec2e025
STIX ID: identity--f58c783d-6ade-5c30-aa75-02abbec2e025
LOLBAS (Living Off The Land Binaries and Scripts) catalogs legitimate Windows binaries, scripts, and libraries that can be abused by adversaries for execution, download, bypass, and other attack techniques. This processor publishes dated procedure records for each documented binary/command pairing, along with related file, process, directory, operating system, and ATT&CK technique context to support detection engineering and threat hunting.