diff --git a/atomics/T1037/T1037.md b/atomics/T1037/T1037.md index d4c29e98..36128257 100644 --- a/atomics/T1037/T1037.md +++ b/atomics/T1037/T1037.md @@ -1,6 +1,8 @@ # T1037 - Logon Scripts ## [Description from ATT&CK](https://attack.mitre.org/wiki/Technique/T1037) -
### Windows +
+ +### Windows Windows allows logon scripts to be run whenever a specific user or group of users log into a system. (Citation: TechNet Logon Scripts) The scripts can be used to perform administrative functions, which may often execute other programs or send information to an internal logging server.