2017-10-11 10:35:17 -07:00
|
|
|
## File and Directory Discovery
|
|
|
|
|
|
|
|
|
|
MITRE ATT&CK Technique: [T1083](https://attack.mitre.org/wiki/Technique/T1083)
|
|
|
|
|
|
|
|
|
|
### Directory listing
|
|
|
|
|
|
|
|
|
|
Input:
|
|
|
|
|
|
2017-11-13 11:02:39 -07:00
|
|
|
dir /s c:\ >> %temp%\download
|
|
|
|
|
dir /s "c:\Documents and Settings" >> %temp%\download
|
|
|
|
|
dir /s "c:\Program Files\" >> %temp%\download
|
|
|
|
|
dir /s d:\ >> %temp%\download
|
2018-01-11 17:12:09 +07:00
|
|
|
dir "%systemdrive%\Users\*.*"
|
|
|
|
|
dir "%userprofile%\AppData\Roaming\Microsoft\Windows\Recent\*.*"
|
|
|
|
|
dir "%userprofile%\Desktop\*.*"
|
2018-01-11 15:33:27 -05:00
|
|
|
|
2018-01-11 16:56:58 -05:00
|
|
|
tree /F >> %temp%\download
|
