From a18c66e61d8a97e714a1fa1e3ef039e5c74cff66 Mon Sep 17 00:00:00 2001 From: CircleCI Atomic Red Team doc generator Date: Fri, 20 Mar 2020 20:35:45 +0000 Subject: [PATCH] Generate docs from job=validate_atomics_generate_docs branch=master --- atomics/T1219/T1219.md | 2 +- atomics/index.yaml | 7 +++++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/atomics/T1219/T1219.md b/atomics/T1219/T1219.md index 839fd2ac..bffd60e4 100644 --- a/atomics/T1219/T1219.md +++ b/atomics/T1219/T1219.md @@ -14,7 +14,7 @@ Admin tools such as TeamViewer have been used by several groups targeting instit
## Atomic Test #1 - TeamViewer Files Detected Test on Windows -An adversary may attempt to trick the user into downloading teamviewer and using this to maintain access to the machine. +An adversary may attempt to trick the user into downloading teamviewer and using this to maintain access to the machine. Download of TeamViewer installer will be at the destination location when sucessfully executed. **Supported Platforms:** Windows diff --git a/atomics/index.yaml b/atomics/index.yaml index d61544a1..04094742 100644 --- a/atomics/index.yaml +++ b/atomics/index.yaml @@ -28622,8 +28622,11 @@ command-and-control: identifier: T1219 atomic_tests: - name: TeamViewer Files Detected Test on Windows - description: "An adversary may attempt to trick the user into downloading teamviewer - and using this to maintain access to the machine. \n" + description: 'An adversary may attempt to trick the user into downloading teamviewer + and using this to maintain access to the machine. Download of TeamViewer installer + will be at the destination location when sucessfully executed. + +' supported_platforms: - windows executor: