From cea0622f988defd711971f87659c8fc0f40d223f Mon Sep 17 00:00:00 2001 From: CircleCI Atomic Red Team doc generator Date: Fri, 19 Jun 2020 22:48:11 +0000 Subject: [PATCH] Generate docs from job=validate_atomics_generate_docs branch=master --- atomics/Indexes/index.yaml | 6 ++++++ atomics/T1197/T1197.md | 4 ++++ 2 files changed, 10 insertions(+) diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index a69b86e8..dfff5c5b 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -9020,6 +9020,9 @@ persistence: bitsadmin.exe /setnotifycmdline #{bits_job_name} #{command_path} #{command_line} bitsadmin.exe /complete AtomicBITS bitsadmin.exe /resume #{bits_job_name} + cleanup_command: 'del #{local_file} >nul 2>&1 + +' name: command_prompt T1547: technique: @@ -20181,6 +20184,9 @@ defense-evasion: bitsadmin.exe /setnotifycmdline #{bits_job_name} #{command_path} #{command_line} bitsadmin.exe /complete AtomicBITS bitsadmin.exe /resume #{bits_job_name} + cleanup_command: 'del #{local_file} >nul 2>&1 + +' name: command_prompt T1027.001: technique: diff --git a/atomics/T1197/T1197.md b/atomics/T1197/T1197.md index b8cc56ba..0fbf902a 100644 --- a/atomics/T1197/T1197.md +++ b/atomics/T1197/T1197.md @@ -121,6 +121,10 @@ bitsadmin.exe /complete AtomicBITS bitsadmin.exe /resume #{bits_job_name} ``` +#### Cleanup Commands: +```cmd +del #{local_file} >nul 2>&1 +```