From 3cdd80d2f4cd01976e523a4547b6ed4857f9af21 Mon Sep 17 00:00:00 2001 From: xkeyscore007 <62616041+xkeyscore007@users.noreply.github.com> Date: Tue, 29 Sep 2020 21:17:02 +0530 Subject: [PATCH] Test Case to search a user's bookmarks file from Internet Explorer (#1227) * Lists the Ineternet Explorer bookmarks This command lists the bookmarks for Internet Explorer that are found in the Favorites folder * Update T1217.yaml Also, below command can be used to achieve similar results - dir /s /b C:\Users\%USERNAME%\Favorites Co-authored-by: Carrie Roberts --- atomics/T1217/T1217.yaml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/atomics/T1217/T1217.yaml b/atomics/T1217/T1217.yaml index 24f111d4..3e12d8ab 100644 --- a/atomics/T1217/T1217.yaml +++ b/atomics/T1217/T1217.yaml @@ -88,4 +88,11 @@ atomic_tests: command: | where /R C:\Users\ places.sqlite name: command_prompt - +- name: List Internet Explorer Bookmarks using the command prompt + description: This test will list the bookmarks for Internet Explorer that are found in the Favorites folder + supported_platforms: + - windows + executor: + command: | + dir /s /b %USERPROFILE%\Favorites + name: command_prompt