/msi_installed_search

Just cpp version of msi_search which is useful for third party windows installer EoPs

Primary LanguageC++

msi_installed_search

Just cpp version of msi_search which is useful for hunting third party windows installer EoPs
Ref: https://github.com/mandiant/msi-search
https://web.archive.org/web/20191216190557/https://sandboxescaper.blogspot.com/2019/12/chasing-polar-bears-part-one.html
https://www.trustedsec.com/blog/finding-a-privilege-escalation-in-the-intel-trusted-connect-service-client
https://cloud.google.com/blog/topics/threat-intelligence/privileges-third-party-windows-installers/
https://badoption.eu/blog/2023/10/03/MSIFortune.html https://blog.doyensec.com//2023/03/21/windows-installer.html