From 45741c6c95faa18d3c1dec8bb7d007f91814d930 Mon Sep 17 00:00:00 2001 From: Atomic Red Team doc generator Date: Wed, 14 Dec 2022 20:35:27 +0000 Subject: [PATCH] Generated docs from job=generate-docs branch=master [ci skip] --- atomics/Indexes/index.yaml | 4 ++-- atomics/T1007/T1007.md | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 57817150..37e91804 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -84444,14 +84444,14 @@ discovery: description: | Enumerates started system services using net.exe and writes them to a file. This technique has been used by multiple threat actors. - Upon successful execution, net.exe will run from cmd.exe that queries services. Expected output is to a txt file in c:\Windows\Temp\service-list.txt.s + Upon successful execution, net.exe will run from cmd.exe that queries services. Expected output is to a txt file in in the temp directory called service-list.txt. supported_platforms: - windows input_arguments: output_file: description: Path of file to hold net.exe output type: Path - default: C:\Windows\Temp\service-list.txt + default: "%temp%\\service-list.txt" executor: command: 'net.exe start >> #{output_file} diff --git a/atomics/T1007/T1007.md b/atomics/T1007/T1007.md index e043cbf1..872adf9f 100644 --- a/atomics/T1007/T1007.md +++ b/atomics/T1007/T1007.md @@ -50,7 +50,7 @@ sc query state= all ## Atomic Test #2 - System Service Discovery - net.exe Enumerates started system services using net.exe and writes them to a file. This technique has been used by multiple threat actors. -Upon successful execution, net.exe will run from cmd.exe that queries services. Expected output is to a txt file in c:\Windows\Temp\service-list.txt.s +Upon successful execution, net.exe will run from cmd.exe that queries services. Expected output is to a txt file in in the temp directory called service-list.txt. **Supported Platforms:** Windows @@ -64,7 +64,7 @@ Upon successful execution, net.exe will run from cmd.exe that queries services. #### Inputs: | Name | Description | Type | Default Value | |------|-------------|------|---------------| -| output_file | Path of file to hold net.exe output | Path | C:\Windows\Temp\service-list.txt| +| output_file | Path of file to hold net.exe output | Path | %temp%\service-list.txt| #### Attack Commands: Run with `command_prompt`!