189k views
4 votes
What codes will you see for artifacts on the source system for psexec

1 Answer

3 votes

Final answer:

Artifacts on the source system for psexec

Step-by-step explanation:

When using the psexec tool to execute commands on a remote system, artifacts may be left on the source system. These artifacts can be seen in various forms, such as log files, registry entries, or temporary files.

For example, when using psexec to run a command remotely, a log file named "psexecsvc.log" may be created in the Windows directory on the source system. This log file can provide information about the execution and any errors that occurred.

Additionally, psexec may create or modify registry entries on the source system as part of its functionality. These registry entries can be found in the "HKCU\Software\Sysinternals" or "HKLM\Software\Sysinternals" paths.

User Sadiq Ali
by
8.1k points