From 1ba7b664e3fe283bdbe00687b7d8461735372963 Mon Sep 17 00:00:00 2001 From: hegusung <7390383+hegusung@users.noreply.github.com> Date: Sun, 13 Oct 2024 22:03:26 +0200 Subject: [PATCH] Update Devtoolslauncher.yml Tags Added Tags - Execute EXE --- yml/OtherMSBinaries/Devtoolslauncher.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/yml/OtherMSBinaries/Devtoolslauncher.yml b/yml/OtherMSBinaries/Devtoolslauncher.yml index 2a67dc6..952594d 100644 --- a/yml/OtherMSBinaries/Devtoolslauncher.yml +++ b/yml/OtherMSBinaries/Devtoolslauncher.yml @@ -11,6 +11,8 @@ Commands: Privileges: User MitreID: T1127 OperatingSystem: Windows 7 and up with VS/VScode installed + Tags: + - Execute: EXE - Command: devtoolslauncher.exe LaunchForDebug [PATH_TO_BIN] "argument here" test Description: The above binary will execute other binary. Usecase: Execute any binary with given arguments. @@ -18,6 +20,8 @@ Commands: Privileges: User MitreID: T1127 OperatingSystem: Windows 7 and up with VS/VScode installed + Tags: + - Execute: EXE Full_Path: - Path: 'c:\windows\system32\devtoolslauncher.exe' Code_Sample: