From 4c232b06fe02c4f1ad9224bc76f4d4f0b7d2c213 Mon Sep 17 00:00:00 2001
From: hegusung <7390383+hegusung@users.noreply.github.com>
Date: Sun, 13 Oct 2024 18:52:43 +0200
Subject: [PATCH] Update Cl_invocation.yml Tags

Added Tags:
Execute EXE
Execute CMD
---
 yml/OSScripts/Cl_invocation.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/yml/OSScripts/Cl_invocation.yml b/yml/OSScripts/Cl_invocation.yml
index c7b884d..783eea7 100644
--- a/yml/OSScripts/Cl_invocation.yml
+++ b/yml/OSScripts/Cl_invocation.yml
@@ -11,6 +11,9 @@ Commands:
     Privileges: User
     MitreID: T1216
     OperatingSystem: Windows 10
+    Tags:
+      - Execute: EXE
+      - Execute: CMD
 Full_Path:
   - Path: C:\Windows\diagnostics\system\AERO\CL_Invocation.ps1
   - Path: C:\Windows\diagnostics\system\Audio\CL_Invocation.ps1