mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-27 07:18:05 +01:00
Changed AWL MitreID and removed extra YAML record start "---"
This commit is contained in:
parent
53a4070205
commit
730359aa0d
@ -16,7 +16,7 @@ Commands:
|
||||
Usecase: Performs execution of specified file, can be used to bypass Application Whitelisting.
|
||||
Category: AWL Bypass
|
||||
Privileges: User
|
||||
MitreID: T1202
|
||||
MitreID: T1218
|
||||
OperatingSystem: Windows 10 1809, Windows Server 2019
|
||||
Full_Path:
|
||||
- Path: c:\windows\system32\OpenSSH\ssh.exe
|
||||
@ -25,4 +25,3 @@ Detection:
|
||||
- IOC: command line arguments specifying execution.
|
||||
Acknowledgement:
|
||||
- Person: Akshat Pradhan
|
||||
---
|
Loading…
Reference in New Issue
Block a user