Added additional example to wsl.exe

yml/OtherMSBinaries/Wsl.yml

@@ -20,6 +20,14 @@ Commands:
     MitreID: T1202
     MitreLink: https://attack.mitre.org/techniques/T1202
     OperatingSystem: Windows 10, Windows 19 Server
+  - Command: wsl.exe --exec bash -c 'cat file'
+    Description: Cats /etc/shadow file as root
+    Usecase: Performs execution of arbitrary Linux commands.
+    Category: Execute
+    Privileges: User
+    MitreID: T1202
+    MitreLink: https://attack.mitre.org/techniques/T1202
+    OperatingSystem: Windows 10, Windows 19 Server
 Full_Path:
   - Path: C:\Windows\System32\wsl.exe
 Code_Sample:
@@ -33,4 +41,6 @@ Acknowledgement:
     Handle: '@aionescu'
   - Person: Matt
     Handle: '@NotoriousRebel1'
+  - Person: Asif Matadar
+    Handle: '@d1r4c'
 ---