security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'master' into complete-art-io-site-migration

Browse Source
This commit is contained in:
Carrie Roberts
2021-08-30 13:52:44 -06:00
committed by GitHub
parent 762e2992a7 7e4f6a4b88
commit 1d43b259fa
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1553.005/T1553.005.yaml
+1
View File
@@ -61,6 +61,7 @@ atomic_tests:
name: powershell
- name: Remove the Zone.Identifier alternate data stream
auto_generated_guid: 64b12afc-18b8-4d3f-9eab-7f6cae7c73f9
description: |
Remove the Zone.Identifier alternate data stream which identifies the file as downloaded from the internet.
Removing this allows more freedom in executing scripts in PowerShell and avoids opening files in protected view.
atomics/used_guids.txt
+1
View File
@@ -781,3 +781,4 @@ bc071188-459f-44d5-901a-f8f2625b2d2e
d1253f6e-c29b-49dc-b466-2147a6191932
dbf4f5a9-b8e0-46a3-9841-9ad71247239e
b9bbae2c-2ba6-4cf3-b452-8e8f908696f3
64b12afc-18b8-4d3f-9eab-7f6cae7c73f9