diff --git a/Windows/Collection/Audio_Capture.md b/Windows/Collection/Audio_Capture.md deleted file mode 100644 index 4ca8648c..00000000 --- a/Windows/Collection/Audio_Capture.md +++ /dev/null @@ -1,24 +0,0 @@ ---- -attack_technique: T1123 -display_name: Audio Capture - -atomic_tests: -- name: SourceRecorder via cmd.exe - description: | - Create a file called test.wma, with the duration of 30 seconds - supported_platforms: - - windows - executor: command_prompt - args: - - output_file: test.wma - - duration_hms: 0000:00:30 - command: cmd.exe /c "SoundRecorder /FILE #{output_file} /DURATION #{duration_hms}" - -- name: PowerShell Cmdlet - description: | - [AudioDeviceCmdlets](https://github.com/cdhunt/WindowsAudioDevice-Powershell-Cmdlet) - supported_platforms: - - windows - executor: powershell - args: - command: powershell.exe xxxxx diff --git a/Windows/Collection/Browser_Extensions.md b/Windows/Collection/Browser_Extensions.md deleted file mode 100644 index 3550fb8c..00000000 --- a/Windows/Collection/Browser_Extensions.md +++ /dev/null @@ -1,24 +0,0 @@ -## Browser Extensions - -MITRE ATT&CK Technique: [T1176](https://attack.mitre.org/wiki/Technique/T1176) - - -### Chrome (Developer Mode) - -Navigate to [chrome://extensions](chrome://extensions) and tick 'Developer Mode'. - -Click 'Load unpacked extension...' and navigate to [Browser_Extension](../Payloads/Browser_Extension/) - -Then click 'Select' - -### Chrome (Chrome Web Store) - -Navigate to https://chrome.google.com/webstore/detail/minimum-viable-malicious/odlpfdolehmhciiebahbpnaopneicend in Chrome and click 'Add to Chrome' - -### Firefox - -Navigate to [about:debugging](about:debugging) and click "Load Temporary Add-on" - -Navigate to [manifest.json](../Payloads/Browser_Extension/manifest.json) - -Then click 'Open' \ No newline at end of file diff --git a/Windows/Collection/Clipboard_Data.md b/Windows/Collection/Clipboard_Data.md deleted file mode 100644 index 06368836..00000000 --- a/Windows/Collection/Clipboard_Data.md +++ /dev/null @@ -1,15 +0,0 @@ -# Clipboard Data - -MITRE ATT&CK Technique: [T1115](https://attack.mitre.org/wiki/Technique/T1115) - - - -## cmd - - | clip - clip < readme.txt - -## PowerShell - - echo Get-Process | clip - Get-Clipboard | iex