security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

minor syntax update

Browse Source 
Just updating the syntax on the $filtertoconsumerargs
This commit is contained in:
Jimmy Astle
2018-05-07 15:43:40 -04:00
parent a38ad6a815
commit b2ccaa911b
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Windows/Persistence/Windows_Management_Instrumentation_Event_Subscription.md
+3 -3
View File
@@ -22,8 +22,8 @@ $ConsumerArgs = @{name='AtomicRedTeam-WMIPersistence-Example';
$Consumer=New-CimInstance -Namespace root/subscription -ClassName CommandLineEventConsumer -Property $ConsumerArgs
$FilterToConsumerArgs = @{
Filter = [Ref] $Filter
Consumer = [Ref] $Consumer
Filter = [Ref] $Filter;
Consumer = [Ref] $Consumer;
}
$FilterToConsumerBinding = New-CimInstance -Namespace root/subscription -ClassName __FilterToConsumerBinding -Property $FilterToConsumerArgs
```
@@ -50,4 +50,4 @@ $EventFilterToCleanup | Remove-WmiObject
#### References
https://gist.github.com/mattifestation/7fe1df7ca2f08cbfa3d067def00c01af
https://github.com/EmpireProject/Empire/blob/master/data/module_source/persistence/Persistence.psm1#L545
https://github.com/EmpireProject/Empire/blob/master/data/module_source/persistence/Persistence.psm1#L545