Fork and Run

View Child Process for Fork & Run

An operator can check the child process configured for fork & run using the get_child command.

Change Child Process for Fork & Run

To change the child process, use the set_child command. There is no default child process configured for fork and run. When you configure the child process, all fork and run commands will be affected by this. This includes reflective DLL, dotnet, powershell and shellcode injections. The help set_child command returns Affected Commands which specify the list of commands which will be affected by set_child.

Clear Child Process for Fork & Run

To disable fork and run, use the clear_child command.