More changes (mainly changing generic T1218 to dev-specific T1127)

2025-07-27 04:32:24 +02:00 · 2021-11-05 20:06:57 +00:00
parent 8286677dac
commit 2577066af9
19 changed files with 32 additions and 34 deletions
--- a/yml/OSBinaries/Aspnet_Compiler.yml
+++ b/yml/OSBinaries/Aspnet_Compiler.yml
@@ -9,7 +9,7 @@ Commands:
    Usecase: Execute proxied payload with Microsoft signed binary to bypass application control solutions
    Category: AWL Bypass
    Privileges: User
-    MitreID: T1218
+    MitreID: T1127
    OperatingSystem: Windows 10
 Full_Path:
  - Path: c:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe