From 7047b05fe818038cb1257fa79fa36ecc82417f9f Mon Sep 17 00:00:00 2001 From: hegusung <7390383+hegusung@users.noreply.github.com> Date: Sun, 13 Oct 2024 16:55:13 +0200 Subject: [PATCH] Update Runonce.yml Tags Added Tags: - Execute: CMD --- yml/OSBinaries/Runonce.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/yml/OSBinaries/Runonce.yml b/yml/OSBinaries/Runonce.yml index b3191dc..fb02475 100644 --- a/yml/OSBinaries/Runonce.yml +++ b/yml/OSBinaries/Runonce.yml @@ -11,6 +11,8 @@ Commands: Privileges: Administrator MitreID: T1218 OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11 + Tags: + - Execute: CMD Full_Path: - Path: C:\Windows\System32\runonce.exe - Path: C:\Windows\SysWOW64\runonce.exe