Ntsd.exe

Launches command through the debugging process; optionally add `-G` to exit the debugger automatically.

Use Executes an executable under a trusted microsoft signed binary.

ntsd.exe -g {CMD}

Evidence

Upstream reference

Environment

Local host

Context

user

Native

Execute

MITRE

T1127

Refs

learn.microsoft.com/en-us/windows-hardware/drivers/debugger/cdb-command-line-options

strontic.github.io/xcyclopedia/library/ntsd.exe-629EA12D527237B9CD945AC44C2DE80D.html

lolbas-project.github.io/lolbas/OtherMSBinaries/Ntsd/