diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index aff778ca..ff38a136 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -39730,7 +39730,7 @@ execution: - windows input_arguments: source_file: - description: Location of the CSharp source_file + description: Location of the CSharp source file to compile and execute type: Path default: PathToAtomicsFolder\T1106\src\CreateProcess.cs output_file: diff --git a/atomics/T1106/T1106.md b/atomics/T1106/T1106.md index caf6e28b..e9c9721d 100644 --- a/atomics/T1106/T1106.md +++ b/atomics/T1106/T1106.md @@ -25,7 +25,7 @@ Execute program by leveraging Win32 API's. By default, this will launch calc.exe #### Inputs: | Name | Description | Type | Default Value | |------|-------------|------|---------------| -| source_file | Location of the CSharp source_file | Path | PathToAtomicsFolder\T1106\src\CreateProcess.cs| +| source_file | Location of the CSharp source file to compile and execute | Path | PathToAtomicsFolder\T1106\src\CreateProcess.cs| | output_file | Location of the payload | Path | %tmp%\T1106.exe| diff --git a/atomics/T1106/T1106.yaml b/atomics/T1106/T1106.yaml index 5fb914f2..18d54922 100644 --- a/atomics/T1106/T1106.yaml +++ b/atomics/T1106/T1106.yaml @@ -8,7 +8,7 @@ atomic_tests: - windows input_arguments: source_file: - description: Location of the CSharp source_file + description: Location of the CSharp source file to compile and execute type: Path default: PathToAtomicsFolder\T1106\src\CreateProcess.cs output_file: