Update T1082.yaml (#2956)

New atomic added.
2024-10-17 03:16:23 +03:00
parent 14800db83a
commit bddd7e6096
1 changed files with 8 additions and 0 deletions
@@ -546,4 +546,12 @@ atomic_tests:
  executor:
    name: command_prompt
    command: ver
+- name: Display volume shadow copies with "vssadmin"
+  description: The command shows all available volume shadow copies, along with their creation time and location.
+  supported_platforms:
+  - windows
+  executor:
+    name: command_prompt
+    elevation_required: true
+    command: vssadmin.exe list shadows