Changed all OSBinaries according to the new template

yml/OSBinaries/Control.yml

@@ -1,21 +1,31 @@
 ---
 Name: Control.exe
-Description: Execute, Read ADS
-Author: ''
+Description: Binary used to launch controlpanel items in Windows
+Author: 'Oddvar Moe'
 Created: '2018-05-25'
-Categories: []
 Commands:
   - Command: control.exe c:\windows\tasks\file.txt:evil.dll
     Description: Execute evil.dll which is stored in an Alternate Data Stream (ADS).
+    Usecase: Can be used to evade defensive countermeasures or to hide as a persistence mechanism
+    Category: Alternate data streams
+    Privileges: User
+    MitreID: T1196
+    MitreLink: https://attack.mitre.org/wiki/Technique/T1196
+    OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10
 Full Path:
-  - 'C:\Windows\system32\control.exe    '
-  - 'C:\Windows\sysWOW64\control.exe     '
-Code Sample: []
-Detection: []
+  - Path: C:\Windows\System32\control.exe
+  - Path: C:\Windows\SysWOW64\control.exe
+Code Sample: 
+- Code:
+Detection:
+ - IOC: Control.exe executing files from alternate data streams.
 Resources:
-  - https://pentestlab.blog/2017/05/24/applocker-bypass-control-panel/
-  - https://www.contextis.com/resources/blog/applocker-bypass-registry-key-manipulation/
-  - https://bohops.com/2018/01/23/loading-alternate-data-stream-ads-dll-cpl-binaries-to-bypass-applocker/
-  - https://twitter.com/bohops/status/955659561008017409
-Notes: Thanks to Jimmy - @bohops
-
+  - Link: https://pentestlab.blog/2017/05/24/applocker-bypass-control-panel/
+  - Link: https://www.contextis.com/resources/blog/applocker-bypass-registry-key-manipulation/
+  - Link: https://twitter.com/bohops/status/955659561008017409
+  - Link: https://docs.microsoft.com/en-us/windows/desktop/shell/executing-control-panel-items
+  - Link: https://bohops.com/2018/01/23/loading-alternate-data-stream-ads-dll-cpl-binaries-to-bypass-applocker/
+Acknowledgement:
+  - Person: Jimmy
+    Handle: '@bohops'
+---