public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-12-14 22:26:43 +01:00
Code Issues Projects Releases Wiki Activity

Realigning .ps1 scripts to T1216

Browse Source
This commit is contained in:
Wietze
2021-11-05 20:29:07 +00:00
parent bc51cb4e03
commit 8257d60aad
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
yml/OSScripts/CL_LoadAssembly.yml
View File

@@ -9,7 +9,7 @@ Commands:
Usecase: Execute proxied payload with Microsoft signed binary Usecase: Execute proxied payload with Microsoft signed binary
Category: Execute Category: Execute
Privileges: User Privileges: User
MitreID: T1059.001 MitreID: T1216
OperatingSystem: Windows 10 21H1 (likely other versions as well) OperatingSystem: Windows 10 21H1 (likely other versions as well)
Full_Path: Full_Path:
- Path: C:\Windows\diagnostics\system\Audio\CL_LoadAssembly.ps1 - Path: C:\Windows\diagnostics\system\Audio\CL_LoadAssembly.ps1

2
yml/OSScripts/UtilityFunctions.yml
View File

@@ -9,7 +9,7 @@ Commands:
Usecase: Execute proxied payload with Microsoft signed binary Usecase: Execute proxied payload with Microsoft signed binary
Category: Execute Category: Execute
Privileges: User Privileges: User
MitreID: T1059.001 MitreID: T1216
OperatingSystem: Windows 10 21H1 (likely other versions as well) OperatingSystem: Windows 10 21H1 (likely other versions as well)
Full_Path: Full_Path:
- Path: C:\Windows\diagnostics\system\Networking\UtilityFunctions.ps1 - Path: C:\Windows\diagnostics\system\Networking\UtilityFunctions.ps1