diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index da3b2cc4..a1b3b939 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -7921,9 +7921,6 @@ defense-evasion: command: 'Get-ChildItem #{file_path} | % { $_.CreationTime = "#{target_date_time}" } - ' - cleanup_command: 'Remove-Item #{file_path} -Force -ErrorAction Ignore - ' name: powershell - name: Windows - Modify file last modified timestamp with PowerShell @@ -7958,9 +7955,6 @@ defense-evasion: command: 'Get-ChildItem #{file_path} | % { $_.LastWriteTime = "#{target_date_time}" } - ' - cleanup_command: 'Remove-Item #{file_path} -Force -ErrorAction Ignore - ' name: powershell - name: Windows - Modify file last access timestamp with PowerShell @@ -7995,9 +7989,6 @@ defense-evasion: command: 'Get-ChildItem #{file_path} | % { $_.LastAccessTime = "#{target_date_time}" } - ' - cleanup_command: 'Remove-Item #{file_path} -Force -ErrorAction Ignore - ' name: powershell - name: Windows - Timestomp a File diff --git a/atomics/T1070.006/T1070.006.md b/atomics/T1070.006/T1070.006.md index 752ef9b0..6342b137 100644 --- a/atomics/T1070.006/T1070.006.md +++ b/atomics/T1070.006/T1070.006.md @@ -194,10 +194,6 @@ To verify execution, use File Explorer to view the Properties of the file and ob Get-ChildItem #{file_path} | % { $_.CreationTime = "#{target_date_time}" } ``` -#### Cleanup Commands: -```powershell -Remove-Item #{file_path} -Force -ErrorAction Ignore -``` @@ -246,10 +242,6 @@ To verify execution, use File Explorer to view the Properties of the file and ob Get-ChildItem #{file_path} | % { $_.LastWriteTime = "#{target_date_time}" } ``` -#### Cleanup Commands: -```powershell -Remove-Item #{file_path} -Force -ErrorAction Ignore -``` @@ -298,10 +290,6 @@ To verify execution, use File Explorer to view the Properties of the file and ob Get-ChildItem #{file_path} | % { $_.LastAccessTime = "#{target_date_time}" } ``` -#### Cleanup Commands: -```powershell -Remove-Item #{file_path} -Force -ErrorAction Ignore -```