NickTyrer
24404ae40f
added heredoc to tidy formatting
...
changed USER persistence method to EVENT to better describe technique
removed "auditpol.exe /set /subcategory:Logon /failure:Enable" command from subscription_event method to be more opsec safe
added CUSTOM_PS_COMMAND advanced option
updated description to reflect changes
2017-06-21 18:15:13 +01:00
..
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-26 07:33:46 -05:00
2017-05-03 15:44:51 -05:00
2017-05-07 21:20:33 -05:00
2017-05-03 15:44:51 -05:00
2017-05-25 17:33:07 -05:00
2017-05-22 12:30:52 +02:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-06-21 18:15:13 +01:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-30 13:59:31 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00
2017-05-03 15:44:51 -05:00