LoFP / T1497.003

T1497.003

Title	Tags
administrator may use choice.exe to allow user to choose from and indexes of choices from a batch script.	t1497 T1497.003 endpoint splunk
administrator or network operator may execute this command. please update the filter macros to remove false positives.	t1497 T1497.003 endpoint splunk