MITRE ATT&CK / Software / S0193

Forfiles

ID
S0193
Type
Tool
Source
attack.mitre.org
MITRE last modified
25 Apr 2025

Forfiles is a Windows utility commonly used in batch jobs to execute commands on one or more selected files or directories (ex: list all directories in a drive, read the first line of all files created yesterday, etc.). Forfiles can be executed from either the command line, Run window, or batch files/scripts. [1]

Techniques used (3)

Groups using it (1)

References

  1. Microsoft Forfiles Aug 2016