Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//NOFORN
For example, using “System Volume Information\Logs\” directory
• Linkfiles themselves need to be visible by the user to gain execution, however,
the Riverjack execution vector hides these linkfiles and uses the library-ms file to
point to the links. Therefore, you can hide the linkfiles for Riverjack in this same
manner:
Again, “System Volume Information\Logs\”.
SECRET//NOFORN
20