Forfiles

MITRE
Malware Type:
Tool
First seen:
Unknown
Last seen:
Unknown
Details:

[Forfiles](https://attack.mitre.org/software/S0193) is a Windows utility commonly used in batch jobs to execute commands on one or more selected files or directories (ex: list all directories in a drive, read the first line of all files created yesterday, etc.). Forfiles can be executed from either the command line, Run window, or batch files/scripts. (Citation: Microsoft Forfiles Aug 2016)

Associated Techniques (3)
ID ATT&CK Tactics
T1005 Data from Local System -
T1083 File and Directory Discovery -
T1202 Indirect Command Execution -
Used by Actors (1)
Metadata
ID: 745
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00