mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-02-27 12:33:01 +01:00
Update Agentexecutor.yml Tags
Added Tags: Execute Powershell Execute EXE
This commit is contained in:
parent
a01bab762e
commit
8fc6995678
@ -11,6 +11,8 @@ Commands:
|
||||
Privileges: User
|
||||
MitreID: T1218
|
||||
OperatingSystem: Windows 10
|
||||
Tags:
|
||||
- Execute: Powershell
|
||||
- Command: AgentExecutor.exe -powershell "c:\temp\malicious.ps1" "c:\temp\test.log" "c:\temp\test1.log" "c:\temp\test2.log" 60000 "C:\temp\" 0 1
|
||||
Description: If we place a binary named powershell.exe in the path c:\temp, agentexecutor.exe will execute it successfully
|
||||
Usecase: Execute a provided EXE
|
||||
@ -18,6 +20,8 @@ Commands:
|
||||
Privileges: User
|
||||
MitreID: T1218
|
||||
OperatingSystem: Windows 10
|
||||
Tags:
|
||||
- Execute: EXE
|
||||
Full_Path:
|
||||
- Path: C:\Program Files (x86)\Microsoft Intune Management Extension\AgentExecutor.exe
|
||||
Code_Sample:
|
||||
|
Loading…
Reference in New Issue
Block a user