mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-29 13:42:18 +02:00
MITRE ATT&CK realignment sprint
This commit is contained in:
@@ -10,10 +10,9 @@ Commands:
|
||||
Category: Execute
|
||||
Privileges: User
|
||||
MitreID: T1218
|
||||
MitreLink: https://attack.mitre.org/techniques/T1218/
|
||||
OperatingSystem: Windows 7 and up with Whatsapp installed
|
||||
Full_Path:
|
||||
- Path: '%localappdata%\Whatsapp\Update.exe'
|
||||
Detection:
|
||||
Detection:
|
||||
- IOC: '"%localappdata%\Whatsapp\Update.exe" spawned an unknown process'
|
||||
---
|
||||
|
Reference in New Issue
Block a user