From d1f6a8a3972000152726fdd16b5c50d685444171 Mon Sep 17 00:00:00 2001 From: hegusung <7390383+hegusung@users.noreply.github.com> Date: Sun, 13 Oct 2024 16:36:45 +0200 Subject: [PATCH] Update Provlaunch.yml Tags Added Tags: Execute CMD --- yml/OSBinaries/Provlaunch.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/yml/OSBinaries/Provlaunch.yml b/yml/OSBinaries/Provlaunch.yml index 0d29e27..7f5b18b 100644 --- a/yml/OSBinaries/Provlaunch.yml +++ b/yml/OSBinaries/Provlaunch.yml @@ -11,6 +11,8 @@ Commands: Privileges: Administrator MitreID: T1218 OperatingSystem: Windows 10, Windows 11, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022 + Tags: + - Execute: CMD Full_Path: - Path: c:\windows\system32\provlaunch.exe Detection: