Eric CapuanoI am trying to recreate this command obfuscation technique observed by Sophos, but I cannot get this to work on multiple systems... Is anyone else familiar with using pipes to break up a command in this way?
NS@eric_capuano
I'm not aware of that being valid syntax. I toyed with it on a couple lab boxes with no success.
I wonder if it could be some kind of unicode lookalike that's getting ignored by cmd. Or some kind of character encoding shenanigans.
Jima 