mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-27 04:32:24 +02:00
Adding Windows file path validation for values of File_Path (#403)
This commit is contained in:
@@ -28,8 +28,8 @@ Commands:
|
||||
MitreID: T1127
|
||||
OperatingSystem: Windows
|
||||
Full_Path:
|
||||
- Path: C:\Program Files\Microsoft Visual Studio\{version}\Community\Common7\IDE\VSLaunchBrowser.exe
|
||||
- Path: C:\Program Files (x86)\Microsoft Visual Studio\{version}\Community\Common7\IDE\VSLaunchBrowser.exe
|
||||
- Path: C:\Program Files\Microsoft Visual Studio\<version>\Community\Common7\IDE\VSLaunchBrowser.exe
|
||||
- Path: C:\Program Files (x86)\Microsoft Visual Studio\<version>\Community\Common7\IDE\VSLaunchBrowser.exe
|
||||
Detection:
|
||||
- IOC: cmd.exe as sub-process of VSLaunchBrowser
|
||||
- IOC: URL on a VSLaunchBrowser command line
|
||||
|
Reference in New Issue
Block a user