security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Edited & Updated T1217 (#988)

Browse Source 
* Edited 1217  for Edge Chromium

Edited 1217 atomic as it also executes for Edge Chromium on Windows

* Updates T1217

Added Atomic for listing location of all FireFox bookmark databases

* typo fix

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
This commit is contained in:
Tsora-Pop
2020-05-14 10:57:37 -05:00
committed by GitHub
parent efb886208f
commit cc4d7c0a86
1 changed files with 15 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1217/T1217.yaml
+15 -2
View File
@@ -73,9 +73,9 @@ atomic_tests:
command: |
Get-ChildItem -Path C:\Users\ -Filter Bookmarks -Recurse -ErrorAction SilentlyContinue -Force
- name: List Google Chrome Bookmarks on Windows with command prompt.
- name: List Google Chrome / Edge Chromium Bookmarks on Windows with command prompt.
description: |
Searches for Google Chromes's Bookmarks file (on Windows distributions) that contains bookmarks.
Searches for Google Chromes's and Edge Chromium's Bookmarks file (on Windows distributions) that contains bookmarks.
Upon execution, paths that contain bookmark files will be displayed.
supported_platforms:
@@ -85,3 +85,16 @@ atomic_tests:
name: command_prompt
command: |
where /R C:\Users\ Bookmarks
- name: List Mozilla Firefox bookmarks on Windows with command prompt.
description: |
Searches for Mozilla Firefox bookmarks file (on Windows distributions) that contains bookmarks in a SQLITE database.
Upon execution, paths that contain bookmark files will be displayed.
supported_platforms:
- windows
executor:
name: command_prompt
command: |
where /R C:\Users\ places.sqlite