WEBVTT

00:00:05.040 --> 00:00:10.530
Hello, and welcome to Pluralsight. I'm Uzair Ansari, and in this course, we

00:00:10.530 --> 00:00:14.460
are going to look into one of red team's tool, PowerShell‑RAT.

00:00:14.470 --> 00:00:20.260
PowerShell‑RAT is a PowerShell and Python based backdoor tool that uses

00:00:20.260 --> 00:00:23.160
Gmail to exfiltrate data as an email attachment.

00:00:24.340 --> 00:00:28.330
It leverages Windows PowerShell to perform malicious activities on a

00:00:28.330 --> 00:00:32.860
compromised system and sends sensitive information to the adversary.

00:00:35.340 --> 00:00:38.830
PowerShell‑RAT leverages the power and functionality of Windows

00:00:38.830 --> 00:00:42.620
PowerShell to perform tasks such as capturing screenshots,

00:00:43.040 --> 00:00:45.880
creating scheduled tasks, and sending email.

00:00:47.440 --> 00:00:50.650
This tool will help cyber teams during red team engagements

00:00:50.860 --> 00:00:53.260
that allows them to backdoor Windows machine.

00:00:54.140 --> 00:00:57.570
If you're looking for one such data exfiltration tool, then join

00:00:57.570 --> 00:01:01.970
me in this course wherein we will see how to use PowerShell‑RAT to

00:01:01.970 --> 00:01:06.690
exfiltrate user activity. At the end of this course, please

00:01:06.690 --> 00:01:08.320
remember to rate this course.

00:01:09.340 --> 00:01:11.860
Thanks for watching. See you in the next module.