Adding 'Execute' categories to existing 'AWL Bypass' binaries.

yml/OtherMSBinaries/Rcsi.yml

@@ -4,6 +4,14 @@ Description: Non-Interactive command line inerface included with Visual Studio.
 Author: 'Oddvar Moe'
 Created: '2018-05-25'
 Commands:
+  - Command: rcsi.exe bypass.csx
+    Description: Use embedded C# within the csx script to execute the code.
+    Usecase: Local execution of arbitrary C# code stored in local CSX file.
+    Category: Execute
+    Privileges: User
+    MitreID: T1218
+    MitreLink: https://attack.mitre.org/wiki/Technique/T1218
+    OperatingSystem: Windows
   - Command: rcsi.exe bypass.csx
     Description: Use embedded C# within the csx script to execute the code.
     Usecase: Local execution of arbitrary C# code stored in local CSX file.
@@ -23,4 +31,4 @@ Resources:
 Acknowledgement:
   - Person: Matt Nelson
     Handle: '@enigma0x3'
----
+---