security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

T1074 .bat fix (#733)

Browse Source 
Changing "sc query" to "sc.exe query" so it runs with PowerShell. "sc" is an alias in powershell for Set-Content.
This commit is contained in:
Brian Thacker
2019-12-18 10:32:36 -06:00
committed by Carrie Roberts
parent 84b724b29d
commit b3ce1fb005
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1074/Discovery.bat
+1 -1
View File
@@ -8,7 +8,7 @@ net config workstation
net accounts
net accounts /domain
net view
sc query
sc.exe query
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
reg query HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
reg query HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce