diff --git a/atomics/T1219/T1219.md b/atomics/T1219/T1219.md index 839fd2ac..bffd60e4 100644 --- a/atomics/T1219/T1219.md +++ b/atomics/T1219/T1219.md @@ -14,7 +14,7 @@ Admin tools such as TeamViewer have been used by several groups targeting instit
## Atomic Test #1 - TeamViewer Files Detected Test on Windows -An adversary may attempt to trick the user into downloading teamviewer and using this to maintain access to the machine. +An adversary may attempt to trick the user into downloading teamviewer and using this to maintain access to the machine. Download of TeamViewer installer will be at the destination location when sucessfully executed. **Supported Platforms:** Windows diff --git a/atomics/index.yaml b/atomics/index.yaml index d61544a1..04094742 100644 --- a/atomics/index.yaml +++ b/atomics/index.yaml @@ -28622,8 +28622,11 @@ command-and-control: identifier: T1219 atomic_tests: - name: TeamViewer Files Detected Test on Windows - description: "An adversary may attempt to trick the user into downloading teamviewer - and using this to maintain access to the machine. \n" + description: 'An adversary may attempt to trick the user into downloading teamviewer + and using this to maintain access to the machine. Download of TeamViewer installer + will be at the destination location when sucessfully executed. + +' supported_platforms: - windows executor: