Glossary: Threat Vectors: Files, Networks and Endpoints

certutil

Also written: certutil.exe, certutil -urlcache -f

A built-in Windows tool for managing certificates. Attackers misuse it to download files with '-urlcache -f', which is a strong warning sign in a log, as on the quiet order server.