From f08605710402a2684e398080aa7da120584ab2c7 Mon Sep 17 00:00:00 2001 From: hegusung <7390383+hegusung@users.noreply.github.com> Date: Sun, 13 Oct 2024 18:14:56 +0200 Subject: [PATCH] Update Dfshim.yml Tags Added Tags: - Execute: ClickOnce - Execute: Remote --- yml/OSLibraries/Dfshim.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/yml/OSLibraries/Dfshim.yml b/yml/OSLibraries/Dfshim.yml index 36fd9d9..6f76b89 100644 --- a/yml/OSLibraries/Dfshim.yml +++ b/yml/OSLibraries/Dfshim.yml @@ -11,6 +11,9 @@ Commands: Privileges: User MitreID: T1127 OperatingSystem: Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11 + Tags: + - Execute: ClickOne + - Execute: Remote Full_Path: - Path: C:\Windows\Microsoft.NET\Framework\v2.0.50727\Dfsvc.exe - Path: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Dfsvc.exe