Skip to content
← LibraryTechnique entry
LOL-SIGNED-PROXYDefense Evasion

Signed Binary Proxy Execution (parent)

Umbrella for any signed Microsoft binary used to launch attacker code — bypasses naive process-name-only allowlists.

§ Where this technique fits

LOL-SIGNED-PROXY is catalogued under the Defense Evasion tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.