From 65007296a62083a23e05a5f36df713e7c47050f8 Mon Sep 17 00:00:00 2001 From: Elliot Killick Date: Fri, 4 Aug 2023 06:21:36 -0400 Subject: [PATCH] Update Cmdl32.exe resource links (#317) --- yml/OSBinaries/Cmdl32.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/yml/OSBinaries/Cmdl32.yml b/yml/OSBinaries/Cmdl32.yml index 67a7d1a..1e4bf25 100644 --- a/yml/OSBinaries/Cmdl32.yml +++ b/yml/OSBinaries/Cmdl32.yml @@ -20,6 +20,8 @@ Detection: - IOC: Useragent Microsoft(R) Connection Manager Vpn File Update Resources: - Link: https://github.com/LOLBAS-Project/LOLBAS/pull/151 + - Link: https://twitter.com/ElliotKillick/status/1455897435063074824 + - Link: https://elliotonsecurity.com/living-off-the-land-reverse-engineering-methodology-plus-tips-and-tricks-cmdl32-case-study/ Acknowledgement: - Person: Elliot Killick Handle: '@elliotkillick'