From 91eca870020fa5e92499eba1547ca58fbbd5932a Mon Sep 17 00:00:00 2001 From: Wesley Cesar <72465364+wesley587@users.noreply.github.com> Date: Fri, 9 Apr 2021 11:29:11 -0300 Subject: [PATCH] Update T1082.yaml (#1421) Added environmet variables discovery Co-authored-by: Carrie Roberts --- atomics/T1082/T1082.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/atomics/T1082/T1082.yaml b/atomics/T1082/T1082.yaml index 2a669ef8..a3a35e7d 100644 --- a/atomics/T1082/T1082.yaml +++ b/atomics/T1082/T1082.yaml @@ -126,3 +126,12 @@ atomic_tests: command: 'cscript #{vbscript}' name: powershell elevation_required: false +- name: Environment variables discovery + description: | + Identify all environment variables. Upon execution, environments variables and your path info will be displayed. + supported_platforms: + - windows + executor: + command: | + set + name: command_prompt