Command and Scripting Interpreter: Visual Basic

Description

Adversaries may abuse Visual Basic (VB) for execution. VB is a programming language created by Microsoft with interoperability with many Windows technologies such as Component Object Model and the Native API through the Windows API. Although tagged as legacy with no planned future evolutions, VB is integrated and supported in the .NET Framework and cross-platform .NET Core.

Products, Sensors, and Dependencies

Product	Dependencies	Data source	Access required	Protocol	Data Collected	Notes
Tenable Vulnerability Management	Advanced Network Scan	Windows machines	Authenticated Scan	SMB	VBA policy	Plugin ID: 123461

References

Microsoft Office Trust Access to VBA Project Model Object Enabled

Attack Path Technique Details

Framework: MITRE ATT&CK

Family: Execution

Technique: Command and Scripting Interpreter

Sub-Technique: Windows Command Shell

Platform: Windows

Products Required: Tenable Vulnerability Management

Tenable Release Date: 2023 Q3