~/ cat Gpscript.exe.md █
Used by group policy to process scripts
Paths:
C:\Windows\System32\gpscript.exe
C:\Windows\SysWOW64\gpscript.exe
Detection: Scripts added in local group policy Execution of Gpscript.exe after logon
Execute
Executes logon scripts configured in Group Policy.
Gpscript /logon
Executes startup scripts configured in Group Policy
Gpscript /startup