From d904027a3d5616c186f6889047638107f452e278 Mon Sep 17 00:00:00 2001
From: hegusung <7390383+hegusung@users.noreply.github.com>
Date: Sun, 13 Oct 2024 17:12:20 +0200
Subject: [PATCH] Update Ssh.yml Tags

Added Tags:
Execute EXE
---
 yml/OSBinaries/Ssh.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/yml/OSBinaries/Ssh.yml b/yml/OSBinaries/Ssh.yml
index 4c17e63..6d651b1 100644
--- a/yml/OSBinaries/Ssh.yml
+++ b/yml/OSBinaries/Ssh.yml
@@ -11,6 +11,8 @@ Commands:
     Privileges: User
     MitreID: T1202
     OperatingSystem: Windows 10 1809, Windows Server 2019
+    Tags:
+    - Execute: EXE
   - Command: ssh -o ProxyCommand=calc.exe .
     Description: Executes calc.exe from ssh.exe
     Usecase: Performs execution of specified file, can be used as a defensive evasion.
@@ -18,6 +20,8 @@ Commands:
     Privileges: User
     MitreID: T1202
     OperatingSystem: Windows 10
+    Tags:
+    - Execute: EXE
 Full_Path:
   - Path: c:\windows\system32\OpenSSH\ssh.exe
 Detection: