Adding and updating various LOLBINS (#229)

Co-authored-by: Wietze <wietze@users.noreply.github.com>

yml/OtherMSBinaries/Cdb.yml

@@ -14,17 +14,24 @@ Commands:
   - Command: |
      cdb.exe -pd -pn <process_name>
      .shell <cmd>
-    Description: Attaching to any process and executing shell commands
+    Description: Attaching to any process and executing shell commands.
     Usecase: Run a shell command under a trusted Microsoft signed binary
     Category: Execute
     Privileges: User
     MitreID: T1127
     OperatingSystem: Windows
+  - Command: cdb.exe -c C:\debug-script.txt calc
+    Description: Execute arbitrary commands and binaries using a debugging script (see Resources section for a sample file).
+    Usecase: Run commands under a trusted Microsoft signed binary
+    Category: Execute
+    Privileges: User
+    MitreID: T1127
+    OperatingSystem: Windows
 Full_Path:
   - Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\cdb.exe
   - Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\cdb.exe
 Code_Sample:
-  - Code:
+  - Code: https://gist.github.com/nasbench/d9c15864f1e21bdd8b7cf55997b45f4b
 Detection:
   - Sigma: https://github.com/SigmaHQ/sigma/blob/08ca62cc8860f4660e945805d0dd615ce75258c1/rules/windows/process_creation/win_susp_cdb.yml
   - Elastic: https://github.com/elastic/detection-rules/blob/414d32027632a49fb239abb8fbbb55d3fa8dd861/rules/windows/defense_evasion_unusual_process_network_connection.toml
@@ -35,6 +42,7 @@ Resources:
   - Link: https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/cdb-command-line-options
   - Link: https://gist.github.com/mattifestation/94e2b0a9e3fe1ac0a433b5c3e6bd0bda
   - Link: https://blog.thecybersecuritytutor.com/the-power-of-cdb-debugging-tool/
+  - Link: https://twitter.com/nas_bench/status/1534957360032120833
 Acknowledgement:
   - Person: Matt Graeber
     Handle: '@mattifestation'
@@ -42,3 +50,5 @@ Acknowledgement:
     Handle: '@mrd0x'
   - Person: Spooky Sec
     Handle: '@sec_spooky'
+  - Person: Nasreddine Bencherchali
+    Handle: '@nas_bench'