Adding Windows file path validation for values of File_Path (#403)

This commit is contained in:
Wietze
2024-10-01 23:14:19 +01:00
committed by GitHub
parent d8402e6651
commit 39a7120d40
22 changed files with 35 additions and 35 deletions

View File

@@ -26,7 +26,7 @@ Commands:
MitreID: T1218.015
OperatingSystem: Windows 10, Windows 11
Full_Path:
- Path: "%LOCALAPPDATA%\\Microsoft\\Teams\\current\\Teams.exe"
- Path: 'C:\Users\<username>\AppData\Local\Microsoft\Teams\current\Teams.exe'
Code_Sample:
- Code: https://github.com/lltltk/LOLBAS-research/tree/master/Teams
Detection: