Command and Scripting Interpreter: Visual Basic


Adversaries may abuse Visual Basic (VB) for execution. VB is a programming language created by Microsoft with interoperability with many Windows technologies such as Component Object Model and the Native API through the Windows API. Although tagged as legacy with no planned future evolutions, VB is integrated and supported in the .NET Framework and cross-platform .NET Core.

Products, Sensors, and Dependencies

ProductDependenciesData sourceAccess requiredProtocolData CollectedNotes
Tenable Vulnerability ManagementAdvanced Network ScanWindows machinesAuthenticated ScanSMBVBA policyPlugin ID: 123461


Microsoft Office Trust Access to VBA Project Model Object Enabled

Attack Path Technique Details

Framework: MITRE ATT&CK

Family: Execution

Sub-Technique: Windows Command Shell

Platform: Windows

Tenable Release Date: 2023 Q3