diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index c984f140..a9dd3034 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -75021,18 +75021,18 @@ command-and-control: atomic_tests: - name: Telnet C2 auto_generated_guid: 3b0df731-030c-4768-b492-2a3216d90e53 - description: 'An adversary may establish telnet communication from compromised - endpoint to command and control (C2) server to be able to operate more attack - on objectives. + description: 'An adversary may establish Telnet communication from a compromised + endpoint to a command and control (C2) server in order to carry out additional + attacks on objectives. ' supported_platforms: - windows dependency_executor_name: powershell dependencies: - - description: 'Command and Control (C2) server cam be established by running - PathToAtomicsFolder\T1071\bin\telnet_server.exe on specified server with - specified IP that must be reachable by client (telnet_client.exe) + - description: 'A command and control (C2) server can be established by running + PathToAtomicsFolder\T1071\bin\telnet_server.exe on a specified server with + a specified IP that must be reachable by a client (telnet_client.exe) ' prereq_command: | diff --git a/atomics/Indexes/windows-index.yaml b/atomics/Indexes/windows-index.yaml index feae6039..23cf94bb 100644 --- a/atomics/Indexes/windows-index.yaml +++ b/atomics/Indexes/windows-index.yaml @@ -61875,18 +61875,18 @@ command-and-control: atomic_tests: - name: Telnet C2 auto_generated_guid: 3b0df731-030c-4768-b492-2a3216d90e53 - description: 'An adversary may establish telnet communication from compromised - endpoint to command and control (C2) server to be able to operate more attack - on objectives. + description: 'An adversary may establish Telnet communication from a compromised + endpoint to a command and control (C2) server in order to carry out additional + attacks on objectives. ' supported_platforms: - windows dependency_executor_name: powershell dependencies: - - description: 'Command and Control (C2) server cam be established by running - PathToAtomicsFolder\T1071\bin\telnet_server.exe on specified server with - specified IP that must be reachable by client (telnet_client.exe) + - description: 'A command and control (C2) server can be established by running + PathToAtomicsFolder\T1071\bin\telnet_server.exe on a specified server with + a specified IP that must be reachable by a client (telnet_client.exe) ' prereq_command: | diff --git a/atomics/T1071/T1071.md b/atomics/T1071/T1071.md index ae9bda70..81bb741f 100644 --- a/atomics/T1071/T1071.md +++ b/atomics/T1071/T1071.md @@ -12,7 +12,7 @@ Adversaries may utilize many different protocols, including those used for web b
## Atomic Test #1 - Telnet C2 -An adversary may establish telnet communication from compromised endpoint to command and control (C2) server to be able to operate more attack on objectives. +An adversary may establish Telnet communication from a compromised endpoint to a command and control (C2) server in order to carry out additional attacks on objectives. **Supported Platforms:** Windows @@ -42,7 +42,7 @@ An adversary may establish telnet communication from compromised endpoint to com #### Dependencies: Run with `powershell`! -##### Description: Command and Control (C2) server cam be established by running PathToAtomicsFolder\T1071\bin\telnet_server.exe on specified server with specified IP that must be reachable by client (telnet_client.exe) +##### Description: A command and control (C2) server can be established by running PathToAtomicsFolder\T1071\bin\telnet_server.exe on a specified server with a specified IP that must be reachable by a client (telnet_client.exe) ##### Check Prereq Commands: ```powershell $connection = Test-NetConnection -ComputerName #{server_ip} -Port #{server_port}