From 67f47a078c3ebf1acd5fa7fa7ca802fe2152d21f Mon Sep 17 00:00:00 2001 From: Burak Karaduman <36070747+krdmnbrk@users.noreply.github.com> Date: Wed, 6 Nov 2024 00:11:26 +0300 Subject: [PATCH] New atomic added. (#2970) * New atomic added. * Update T1082.yaml --------- Co-authored-by: Carrie Roberts --- atomics/T1082/T1082.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/atomics/T1082/T1082.yaml b/atomics/T1082/T1082.yaml index ff95accf..d629e261 100644 --- a/atomics/T1082/T1082.yaml +++ b/atomics/T1082/T1082.yaml @@ -569,3 +569,12 @@ atomic_tests: cleanup_command: | cmd.exe /c del "%TMP%\a.txt" +- name: Enumerate Available Drives via gdr + description: | + This test simulates an attacker attempting to list the available drives on the system to gather data about file storage locations. + supported_platforms: + - windows + executor: + name: command_prompt + command: | + powershell.exe -c "gdr -PSProvider 'FileSystem'" \ No newline at end of file