Windows Terminal
wt.exe calc.exe
Execute calc.exe via Windows Terminal.
Use wt.exe as a proxy binary to evade defensive counter-measures
C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_<version_packageid>\wt.exe
Sigma: https://github.com/SigmaHQ/sigma/blob/683b63f8184b93c9564c4310d10c571cbe367e1e/rules/windows/process_creation/proc_creation_win_windows_terminal_susp_children.yml
Nasreddine Bencherchali (@nas_bench)