Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
This commit is contained in:
parent
c45170dcaa
commit
c7cfd2cac0
@@ -4297,9 +4297,9 @@ credential-access:
|
||||
drive_letter:
|
||||
description: Drive letter to source VSC (including colon)
|
||||
type: String
|
||||
default: 'C:'
|
||||
default: C:\
|
||||
executor:
|
||||
command: "(gwmi -list win32_shadowcopy).Create(#{drive_letter},'ClientAccessible')\n"
|
||||
command: "(gwmi -list win32_shadowcopy).Create('#{drive_letter}','ClientAccessible')\n"
|
||||
name: powershell
|
||||
elevation_required: true
|
||||
- name: Create Symlink to Volume Shadow Copy
|
||||
|
||||
@@ -323,14 +323,14 @@ The Active Directory database NTDS.dit may be dumped by copying it from a Volume
|
||||
#### Inputs:
|
||||
| Name | Description | Type | Default Value |
|
||||
|------|-------------|------|---------------|
|
||||
| drive_letter | Drive letter to source VSC (including colon) | String | C:|
|
||||
| drive_letter | Drive letter to source VSC (including colon) | String | C:\|
|
||||
|
||||
|
||||
#### Attack Commands: Run with `powershell`! Elevation Required (e.g. root or admin)
|
||||
|
||||
|
||||
```powershell
|
||||
(gwmi -list win32_shadowcopy).Create(#{drive_letter},'ClientAccessible')
|
||||
(gwmi -list win32_shadowcopy).Create('#{drive_letter}','ClientAccessible')
|
||||
```
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user