Merge pull request #197 from redcanaryco/yaml-additional-cleanup
clean up completed md
This commit is contained in:
@@ -1,24 +0,0 @@
|
||||
---
|
||||
attack_technique: T1123
|
||||
display_name: Audio Capture
|
||||
|
||||
atomic_tests:
|
||||
- name: SourceRecorder via cmd.exe
|
||||
description: |
|
||||
Create a file called test.wma, with the duration of 30 seconds
|
||||
supported_platforms:
|
||||
- windows
|
||||
executor: command_prompt
|
||||
args:
|
||||
- output_file: test.wma
|
||||
- duration_hms: 0000:00:30
|
||||
command: cmd.exe /c "SoundRecorder /FILE #{output_file} /DURATION #{duration_hms}"
|
||||
|
||||
- name: PowerShell Cmdlet
|
||||
description: |
|
||||
[AudioDeviceCmdlets](https://github.com/cdhunt/WindowsAudioDevice-Powershell-Cmdlet)
|
||||
supported_platforms:
|
||||
- windows
|
||||
executor: powershell
|
||||
args:
|
||||
command: powershell.exe xxxxx
|
||||
@@ -1,24 +0,0 @@
|
||||
## Browser Extensions
|
||||
|
||||
MITRE ATT&CK Technique: [T1176](https://attack.mitre.org/wiki/Technique/T1176)
|
||||
|
||||
|
||||
### Chrome (Developer Mode)
|
||||
|
||||
Navigate to [chrome://extensions](chrome://extensions) and tick 'Developer Mode'.
|
||||
|
||||
Click 'Load unpacked extension...' and navigate to [Browser_Extension](../Payloads/Browser_Extension/)
|
||||
|
||||
Then click 'Select'
|
||||
|
||||
### Chrome (Chrome Web Store)
|
||||
|
||||
Navigate to https://chrome.google.com/webstore/detail/minimum-viable-malicious/odlpfdolehmhciiebahbpnaopneicend in Chrome and click 'Add to Chrome'
|
||||
|
||||
### Firefox
|
||||
|
||||
Navigate to [about:debugging](about:debugging) and click "Load Temporary Add-on"
|
||||
|
||||
Navigate to [manifest.json](../Payloads/Browser_Extension/manifest.json)
|
||||
|
||||
Then click 'Open'
|
||||
@@ -1,15 +0,0 @@
|
||||
# Clipboard Data
|
||||
|
||||
MITRE ATT&CK Technique: [T1115](https://attack.mitre.org/wiki/Technique/T1115)
|
||||
|
||||
|
||||
|
||||
## cmd
|
||||
|
||||
<command> | clip
|
||||
clip < readme.txt
|
||||
|
||||
## PowerShell
|
||||
|
||||
echo Get-Process | clip
|
||||
Get-Clipboard | iex
|
||||
Reference in New Issue
Block a user