From bddd7e609692e5cf6d38c24f0de51ccdf88c10f3 Mon Sep 17 00:00:00 2001
From: Burak Karaduman <36070747+krdmnbrk@users.noreply.github.com>
Date: Thu, 17 Oct 2024 03:16:23 +0300
Subject: [PATCH] Update T1082.yaml (#2956)

New atomic added.
---
 atomics/T1082/T1082.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/atomics/T1082/T1082.yaml b/atomics/T1082/T1082.yaml
index 58351744..de1d9b82 100644
--- a/atomics/T1082/T1082.yaml
+++ b/atomics/T1082/T1082.yaml
@@ -546,4 +546,12 @@ atomic_tests:
   executor:
     name: command_prompt
     command: ver
+- name: Display volume shadow copies with "vssadmin"
+  description: The command shows all available volume shadow copies, along with their creation time and location.
+  supported_platforms:
+  - windows
+  executor:
+    name: command_prompt
+    elevation_required: true
+    command: vssadmin.exe list shadows