From daee90f6cdfb368978c5a4708a0d589bcde46ee0 Mon Sep 17 00:00:00 2001 From: hegusung <7390383+hegusung@users.noreply.github.com> Date: Sun, 13 Oct 2024 12:37:51 +0200 Subject: [PATCH] Update Dfsvc.yml Tags Added Tags: - Execute ClickOnce - Execute Remote - Input Custom Format --- yml/OSBinaries/Dfsvc.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/yml/OSBinaries/Dfsvc.yml b/yml/OSBinaries/Dfsvc.yml index 2a1cb9d..c52a3a6 100644 --- a/yml/OSBinaries/Dfsvc.yml +++ b/yml/OSBinaries/Dfsvc.yml @@ -11,6 +11,10 @@ Commands: Privileges: User MitreID: T1127 OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11 + Tags: + - Execute: ClickOnce + - Execute: Remote + - Input: Custom Format Full_Path: - Path: C:\Windows\Microsoft.NET\Framework\v2.0.50727\Dfsvc.exe - Path: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Dfsvc.exe