From a6783069354185dfe08ab575712027eeff8c93d9 Mon Sep 17 00:00:00 2001 From: josehelps Date: Sun, 3 Sep 2023 14:43:08 -0400 Subject: [PATCH] bug: CI failing fixing --- yml/OtherMSBinaries/Teams.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yml/OtherMSBinaries/Teams.yml b/yml/OtherMSBinaries/Teams.yml index 0118779..317be06 100644 --- a/yml/OtherMSBinaries/Teams.yml +++ b/yml/OtherMSBinaries/Teams.yml @@ -19,12 +19,12 @@ Commands: MitreID: T1218 OperatingSystem: Windows Full_Path: - - Path: %LOCALAPPDATA%\Microsoft\Teams\current\Teams.exe + - Path: "%LOCALAPPDATA%\Microsoft\Teams\current\Teams.exe" Code_Sample: - Code: https://github.com/lltltk/LOLBAS-research/tree/master/Teams Detection: - - IOC: %LOCALAPPDATA%\Microsoft\Teams\current\app directory created - - IOC: %LOCALAPPDATA%\Microsoft\Teams\current\app.asar file created/modified by non-Teams installer/updater + - IOC: "%LOCALAPPDATA%\Microsoft\Teams\current\app directory created" + - IOC: "%LOCALAPPDATA%\Microsoft\Teams\current\app.asar file created/modified by non-Teams installer/updater" Resources: - Link: https://l--k.uk/2022/01/16/microsoft-teams-and-other-electron-apps-as-lolbins/ Acknowledgement: