diff --git a/atomics/T1120/T1120.yaml b/atomics/T1120/T1120.yaml index 68e2cc99..33ffe80e 100644 --- a/atomics/T1120/T1120.yaml +++ b/atomics/T1120/T1120.yaml @@ -33,3 +33,14 @@ atomic_tests: command: |- fsutil fsinfo drives name: command_prompt +- name: Get Printer Device List via PowerShell Command + description: | + This test uses PowerShell to list printers on a Windows system, demonstrating a discovery technique attackers might use to + gather details on connected devices. Using Get-Printer, they can view information on all available printers, identifying + potential devices for further targeting. + supported_platforms: + - windows + executor: + name: powershell + command: | + Get-Printer