From 99915c63be222baff3723b04cdbca17c19e42667 Mon Sep 17 00:00:00 2001
From: Burak Karaduman <36070747+krdmnbrk@users.noreply.github.com>
Date: Wed, 13 Nov 2024 06:17:31 +0300
Subject: [PATCH] Get Printer Device List via PowerShell Command (#2973)

---
 atomics/T1120/T1120.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/atomics/T1120/T1120.yaml b/atomics/T1120/T1120.yaml
index 68e2cc99..33ffe80e 100644
--- a/atomics/T1120/T1120.yaml
+++ b/atomics/T1120/T1120.yaml
@@ -33,3 +33,14 @@ atomic_tests:
     command: |-
       fsutil fsinfo drives
     name: command_prompt
+- name: Get Printer Device List via PowerShell Command
+  description: |
+    This test uses PowerShell to list printers on a Windows system, demonstrating a discovery technique attackers might use to 
+    gather details on connected devices. Using Get-Printer, they can view information on all available printers, identifying 
+    potential devices for further targeting.
+  supported_platforms:
+  - windows
+  executor:
+    name: powershell
+    command: |
+      Get-Printer