Tool: cipher.exe

Description

[cipher.exe](https://attack.mitre.org/software/S1205) is a native Microsoft utility that manages encryption of directories and files on NTFS (New Technology File System) partitions by using the Encrypting File System (EFS).(Citation: cipher.exe)

External References

• mitre-attack
• cipher.exe

Techniques Used by This Tool

• T1561.001 — Disk Content Wipe

APT Groups Using This Tool

• APT28