From d1629ab283a317fb0d2dd83561104bbf68bf39fc Mon Sep 17 00:00:00 2001 From: Atomic Red Team doc generator Date: Wed, 7 Sep 2022 02:41:41 +0000 Subject: [PATCH] Generated docs from job=generate-docs branch=master [ci skip] --- atomics/Indexes/index.yaml | 9 --------- atomics/T1070.006/T1070.006.md | 12 ------------ 2 files changed, 21 deletions(-) diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index da3b2cc4..a1b3b939 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -7921,9 +7921,6 @@ defense-evasion: command: 'Get-ChildItem #{file_path} | % { $_.CreationTime = "#{target_date_time}" } - ' - cleanup_command: 'Remove-Item #{file_path} -Force -ErrorAction Ignore - ' name: powershell - name: Windows - Modify file last modified timestamp with PowerShell @@ -7958,9 +7955,6 @@ defense-evasion: command: 'Get-ChildItem #{file_path} | % { $_.LastWriteTime = "#{target_date_time}" } - ' - cleanup_command: 'Remove-Item #{file_path} -Force -ErrorAction Ignore - ' name: powershell - name: Windows - Modify file last access timestamp with PowerShell @@ -7995,9 +7989,6 @@ defense-evasion: command: 'Get-ChildItem #{file_path} | % { $_.LastAccessTime = "#{target_date_time}" } - ' - cleanup_command: 'Remove-Item #{file_path} -Force -ErrorAction Ignore - ' name: powershell - name: Windows - Timestomp a File diff --git a/atomics/T1070.006/T1070.006.md b/atomics/T1070.006/T1070.006.md index 752ef9b0..6342b137 100644 --- a/atomics/T1070.006/T1070.006.md +++ b/atomics/T1070.006/T1070.006.md @@ -194,10 +194,6 @@ To verify execution, use File Explorer to view the Properties of the file and ob Get-ChildItem #{file_path} | % { $_.CreationTime = "#{target_date_time}" } ``` -#### Cleanup Commands: -```powershell -Remove-Item #{file_path} -Force -ErrorAction Ignore -``` @@ -246,10 +242,6 @@ To verify execution, use File Explorer to view the Properties of the file and ob Get-ChildItem #{file_path} | % { $_.LastWriteTime = "#{target_date_time}" } ``` -#### Cleanup Commands: -```powershell -Remove-Item #{file_path} -Force -ErrorAction Ignore -``` @@ -298,10 +290,6 @@ To verify execution, use File Explorer to view the Properties of the file and ob Get-ChildItem #{file_path} | % { $_.LastAccessTime = "#{target_date_time}" } ``` -#### Cleanup Commands: -```powershell -Remove-Item #{file_path} -Force -ErrorAction Ignore -```