Remaping NTDS entries to T1003.003

This commit is contained in:
Wietze
2021-11-05 20:32:44 +00:00
parent 8257d60aad
commit df8c88f4ca
3 changed files with 3 additions and 3 deletions

View File

@@ -44,7 +44,7 @@ Commands:
Usecase: Copy/extract a locked file such as the AD Database
Category: Copy
Privileges: Admin
MitreID: T1003
MitreID: T1003.003
OperatingSystem: Windows 10, Windows 2016 Server, Windows 2019 Server
Full_Path:
- Path: C:\Windows\System32\esentutl.exe