diff --git a/yml/OtherMSBinaries/Adplus.yml b/yml/OtherMSBinaries/Adplus.yml index 9e35b3c..d3095d9 100644 --- a/yml/OtherMSBinaries/Adplus.yml +++ b/yml/OtherMSBinaries/Adplus.yml @@ -7,7 +7,7 @@ Commands: - Command: adplus.exe -hang -pn lsass.exe -o c:\users\mr.d0x\output\folder -quiet Description: Creates a memory dump of the lsass process Usecase: Create memory dump and parse it offline - Category: Credentials + Category: Dump Privileges: SYSTEM MitreID: T1003 MitreLink: https://attack.mitre.org/techniques/T1003/ @@ -24,4 +24,4 @@ Resources: Acknowledgement: - Person: mr.d0x Handle: '@mrd0x' ---- \ No newline at end of file +---