MITRE ATT&CKsoftware (tool)

S1205 cipher.exe

Published 2025-02-25 Modified 2025-03-10 Official page ↗

Domain: enterprise
Platforms: Windows
Version: 1.0
Created: 2025-02-25

Description

cipher.exe is a native Microsoft utility that manages encryption of directories and files on NTFS (New Technology File System) partitions by using the Encrypting File System (EFS).

Uses · MITRE ATT&CK (1)

T1561.001 Disk Content Wipe sub-technique

Referenced by MITRE ATT&CK · uses (2)

C0051 APT28 Nearest Neighbor Campaign campaign
G0007 APT28 group

References

https://support.microsoft.com/en-us/topic/cipher-exe-security-tool-for-the-encrypting-file-system-56c85edd-85cf-ac07-f2f7-ca2d35dab7e4 cipher.exe

S1205 cipher.exe

Description

Related

Uses · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · uses (2)

References