PsExec lateral movement

PsExec.exe \<target> -u <domain>\<user> -p '<pass>' cmd.exe

Executes processes remotely by creating a temporary service on the target host via the Service Control Manager (SMB/ADMIN$).

When you have credentials for an account with local admin privileges on the remote host and want a shell or to run a command. It's the classic lateral movement method in Windows.

If the EDR monitors service creation (almost all do) or the target has SMB signing enforced. In modern environments with EDR, PsExec is one of the most detected techniques: prefer WMI, WinRM, or Schtasks.