Skip to content

Commit e15a9c3

Browse files
committed
Updates for ATT&CK v17
1 parent 7dbdad6 commit e15a9c3

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

yml/HonorableMentions/Code.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ Commands:
99
Usecase: Reverse PowerShell session over MS provided infrastructure.
1010
Category: Execute
1111
Privileges: User
12-
MitreID: T1219
12+
MitreID: T1219.001
1313
OperatingSystem: Windows 10, Windows 11
1414
Full_Path:
1515
- Path: 'C:\Users\<username>\AppData\Local\Programs\Microsoft VS Code\Code.exe'

yml/OSBinaries/Dfsvc.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ Commands:
99
Usecase: Use binary to bypass Application whitelisting
1010
Category: AWL Bypass
1111
Privileges: User
12-
MitreID: T1127
12+
MitreID: T1127.002
1313
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
1414
Tags:
1515
- Execute: ClickOnce

yml/OSLibraries/Dfshim.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ Commands:
99
Usecase: Use binary to bypass Application whitelisting
1010
Category: AWL Bypass
1111
Privileges: User
12-
MitreID: T1127
12+
MitreID: T1127.002
1313
OperatingSystem: Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
1414
Tags:
1515
- Execute: ClickOnce

0 commit comments

Comments
 (0)