diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 6a030154..9eaee27c 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -35042,20 +35042,10 @@ impact: description: New password for the specified account. type: string default: HuHuHUHoHo283283@dJD - dependencies: - - description: 'User account to change password of must exist (User: #{user_account}) - -' - prereq_command: 'net user #{user_account} - -' - get_prereq_command: 'net user #{user_account} #{new_user_password} /add - -' executor: - command: 'net.exe user #{user_account} #{new_password} - -' + command: | + net user #{user_account} #{new_user_password} /add + net.exe user #{user_account} #{new_password} cleanup_command: 'net.exe user #{user_account} /delete >nul 2>&1 ' @@ -35078,20 +35068,10 @@ impact: description: User account to be deleted. type: string default: AtomicUser - dependencies: - - description: 'User account to delete must exist (User: #{user_account}) - -' - prereq_command: 'net user #{user_account} - -' - get_prereq_command: 'net user #{user_account} #{new_user_password} /add - -' executor: - command: 'net.exe user #{user_account} /delete - -' + command: | + net user #{user_account} #{new_user_password} /add + net.exe user #{user_account} /delete name: command_prompt elevation_required: true - name: Remove Account From Domain Admin Group diff --git a/atomics/T1531/T1531.md b/atomics/T1531/T1531.md index 03f1e314..35592027 100644 --- a/atomics/T1531/T1531.md +++ b/atomics/T1531/T1531.md @@ -36,6 +36,7 @@ the password "HuHuHUHoHo283283". ```cmd +net user #{user_account} #{new_user_password} /add net.exe user #{user_account} #{new_password} ``` @@ -46,18 +47,6 @@ net.exe user #{user_account} /delete >nul 2>&1 -#### Dependencies: Run with `command_prompt`! -##### Description: User account to change password of must exist (User: #{user_account}) -##### Check Prereq Commands: -```cmd -net user #{user_account} -``` -##### Get Prereq Commands: -```cmd -net user #{user_account} #{new_user_password} /add -``` - -
@@ -82,24 +71,13 @@ Deletes a user account to prevent access. Upon execution, run the command "net u ```cmd +net user #{user_account} #{new_user_password} /add net.exe user #{user_account} /delete ``` -#### Dependencies: Run with `command_prompt`! -##### Description: User account to delete must exist (User: #{user_account}) -##### Check Prereq Commands: -```cmd -net user #{user_account} -``` -##### Get Prereq Commands: -```cmd -net user #{user_account} #{new_user_password} /add -``` - -