From 43ae6c8a1b9b9a8ace0d8e2b528d2d3d1c99d9df Mon Sep 17 00:00:00 2001 From: hegusung <7390383+hegusung@users.noreply.github.com> Date: Sun, 13 Oct 2024 20:23:33 +0200 Subject: [PATCH] Update pester.yml Tags and removed duplicate Removed Duplicate Command field Added Tags: - Execute EXE --- yml/OSScripts/pester.yml | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/yml/OSScripts/pester.yml b/yml/OSScripts/pester.yml index 237afa9..c8b1d9f 100644 --- a/yml/OSScripts/pester.yml +++ b/yml/OSScripts/pester.yml @@ -11,6 +11,8 @@ Commands: Privileges: User MitreID: T1216 OperatingSystem: Windows 10, Windows 11 + Tags: + - Execute: EXE - Command: Pester.bat ;calc.exe Description: Execute code using Pester. Example here executes calc.exe Usecase: Proxy execution @@ -18,13 +20,8 @@ Commands: Privileges: User MitreID: T1216 OperatingSystem: Windows 10, Windows 11 - - Command: Pester.bat ;calc.exe - Description: Execute code using Pester. Example here executes calc.exe - Usecase: Proxy execution - Category: Execute - Privileges: User - MitreID: T1216 - OperatingSystem: Windows 10, Windows 11 + Tags: + - Execute: EXE Full_Path: - Path: c:\Program Files\WindowsPowerShell\Modules\Pester\\bin\Pester.bat Code_Sample: