From eacf2219019ef66a1b0d345e40808646880add8a Mon Sep 17 00:00:00 2001 From: Michael Haag <“mike@redcanary.com git config --global user.name “Michael Haag> Date: Thu, 30 Aug 2018 14:19:45 -0400 Subject: [PATCH 1/2] Updated T1055 Added reference link for Incoke-DLLInjection --- atomics/T1055/T1055.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1055/T1055.yaml b/atomics/T1055/T1055.yaml index 30b97730..377e0db4 100644 --- a/atomics/T1055/T1055.yaml +++ b/atomics/T1055/T1055.yaml @@ -25,7 +25,7 @@ atomic_tests: mavinject $pid /INJECTRUNNING #{dll_payload} - name: Process Injection via PowerSploit description: | - PowerShell Injection + PowerShell Injection using [PowerSploit Invoke-DLLInjection](https://github.com/PowerShellMafia/PowerSploit/blob/master/CodeExecution/Invoke-DllInjection.ps1) supported_platforms: - windows From 73caddcd1f7ffaff3c5d00dcfa24a898b79706e8 Mon Sep 17 00:00:00 2001 From: CircleCI Atomic Red Team doc generator Date: Thu, 30 Aug 2018 18:19:59 +0000 Subject: [PATCH 2/2] Generate docs from job=validate_atomics_generate_docs branch=T1055-mh --- atomics/T1055/T1055.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1055/T1055.md b/atomics/T1055/T1055.md index 17e82920..e7495865 100644 --- a/atomics/T1055/T1055.md +++ b/atomics/T1055/T1055.md @@ -70,7 +70,7 @@ mavinject $pid /INJECTRUNNING #{dll_payload}
## Atomic Test #2 - Process Injection via PowerSploit -PowerShell Injection +PowerShell Injection using [PowerSploit Invoke-DLLInjection](https://github.com/PowerShellMafia/PowerSploit/blob/master/CodeExecution/Invoke-DllInjection.ps1) **Supported Platforms:** Windows