From a199ff5deb761bb9a8738dd14f27aff12b7f941f Mon Sep 17 00:00:00 2001 From: hegusung <7390383+hegusung@users.noreply.github.com> Date: Sun, 13 Oct 2024 11:59:14 +0200 Subject: [PATCH] Update Atbroker.yml Added the following tags: - Execute: EXE - Input: Custom Format --- yml/OSBinaries/Atbroker.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/yml/OSBinaries/Atbroker.yml b/yml/OSBinaries/Atbroker.yml index dff3368..99c1efb 100644 --- a/yml/OSBinaries/Atbroker.yml +++ b/yml/OSBinaries/Atbroker.yml @@ -11,6 +11,9 @@ Commands: Privileges: User MitreID: T1218 OperatingSystem: Windows 8, Windows 8.1, Windows 10, Windows 11 + Tags: + - Execute: EXE + - Input: Custom Format Full_Path: - Path: C:\Windows\System32\Atbroker.exe - Path: C:\Windows\SysWOW64\Atbroker.exe