diff --git a/atomics/T1217/T1217.yaml b/atomics/T1217/T1217.yaml index 24f111d4..3e12d8ab 100644 --- a/atomics/T1217/T1217.yaml +++ b/atomics/T1217/T1217.yaml @@ -88,4 +88,11 @@ atomic_tests: command: | where /R C:\Users\ places.sqlite name: command_prompt - +- name: List Internet Explorer Bookmarks using the command prompt + description: This test will list the bookmarks for Internet Explorer that are found in the Favorites folder + supported_platforms: + - windows + executor: + command: | + dir /s /b %USERPROFILE%\Favorites + name: command_prompt