diff --git a/atomics/T1082/T1082.yaml b/atomics/T1082/T1082.yaml index ff95accf..d629e261 100644 --- a/atomics/T1082/T1082.yaml +++ b/atomics/T1082/T1082.yaml @@ -569,3 +569,12 @@ atomic_tests: cleanup_command: | cmd.exe /c del "%TMP%\a.txt" +- name: Enumerate Available Drives via gdr + description: | + This test simulates an attacker attempting to list the available drives on the system to gather data about file storage locations. + supported_platforms: + - windows + executor: + name: command_prompt + command: | + powershell.exe -c "gdr -PSProvider 'FileSystem'" \ No newline at end of file