security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update T1082.yaml (#3015)

Browse Source 
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
This commit is contained in:
lazarg
2024-12-19 01:39:58 +01:00
committed by GitHub
parent f477866de4
commit 2d9087901d
1 changed files with 23 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1082/T1082.yaml
+23 -1
View File
@@ -578,4 +578,26 @@ atomic_tests:
executor:
name: command_prompt
command: |
powershell.exe -c "gdr -PSProvider 'FileSystem'"
powershell.exe -c "gdr -PSProvider 'FileSystem'"
- name: Discover OS Product Name via Registry
description: |
Identify the Operating System Product Name via registry with the reg.exe command.
Upon execution, the OS Product Name will be displayed.
supported_platforms:
- windows
executor:
command: |
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName
name: command_prompt
elevation_required: false
- name: Discover OS Build Number via Registry
description: |
Identify the Operating System Build Number via registry with the reg.exe command.
Upon execution, the OS Build Number will be displayed.
supported_platforms:
- windows
executor:
command: |
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v CurrentBuildNumber
name: command_prompt
elevation_required: false