H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeTool
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Forfiles](https://attack.mitre.org/software/S0193) is a Windows utility commonly used in batch jobs to execute commands on one or more selected files or directories (ex: list all directories in a drive, read the first line of all files created yesterday, etc.). Forfiles can be executed from either the command line, Run window, or batch files/scripts. (Citation: Microsoft Forfiles Aug 2016)

Labels

tool
4 recorded

Relationships

uses
from APT28
Group
usesTechnique
2 external

References

mitre-attack
S0193
open
Microsoft Forfiles Aug 2016
https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc753551(v=ws.11)
open