diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index e3358cee..f09607fd 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -46094,7 +46094,7 @@ lateral-movement: computer_name: description: Name of Computer type: string - default: computer1 + default: localhost executor: command: '[activator]::CreateInstance([type]::GetTypeFromProgID("MMC20.application","#{computer_name}")).Document.ActiveView.ExecuteShellCommand("c:\windows\system32\calc.exe", $null, $null, "7") diff --git a/atomics/T1021.006/T1021.006.md b/atomics/T1021.006/T1021.006.md index d3423212..83e7fc53 100644 --- a/atomics/T1021.006/T1021.006.md +++ b/atomics/T1021.006/T1021.006.md @@ -64,7 +64,7 @@ Upon successful execution, cmd will spawn calc.exe on a remote computer. #### Inputs: | Name | Description | Type | Default Value | |------|-------------|------|---------------| -| computer_name | Name of Computer | string | computer1| +| computer_name | Name of Computer | string | localhost| #### Attack Commands: Run with `powershell`!