Realigning .ps1 scripts to T1216

This commit is contained in:
Wietze 2021-11-05 20:29:07 +00:00
parent bc51cb4e03
commit 8257d60aad
No known key found for this signature in database
GPG Key ID: E17630129FF993CF
2 changed files with 2 additions and 2 deletions

View File

@ -9,7 +9,7 @@ Commands:
Usecase: Execute proxied payload with Microsoft signed binary
Category: Execute
Privileges: User
MitreID: T1059.001
MitreID: T1216
OperatingSystem: Windows 10 21H1 (likely other versions as well)
Full_Path:
- Path: C:\Windows\diagnostics\system\Audio\CL_LoadAssembly.ps1

View File

@ -9,7 +9,7 @@ Commands:
Usecase: Execute proxied payload with Microsoft signed binary
Category: Execute
Privileges: User
MitreID: T1059.001
MitreID: T1216
OperatingSystem: Windows 10 21H1 (likely other versions as well)
Full_Path:
- Path: C:\Windows\diagnostics\system\Networking\UtilityFunctions.ps1