security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix space in key name (#2087)

Browse Source
This commit is contained in:
frack113
2022-08-19 16:50:32 +02:00
committed by GitHub
parent d8c6b653b4
commit db63ab2ced
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1112/T1112.yaml
+4 -4
View File
@@ -584,9 +584,9 @@ atomic_tests:
- windows
executor:
command: |
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration /v Notification_Suppress /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration" /v Notification_Suppress /t REG_DWORD /d 1 /f
cleanup_command: |
reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration /v Notification_Suppress /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration" /v Notification_Suppress /f >nul 2>&1
name: command_prompt
elevation_required: true
- name: Allow RDP Remote Assistance Feature
@@ -599,9 +599,9 @@ atomic_tests:
- windows
executor:
command: |
reg add HKLM\System\CurrentControlSet\Control\Terminal Server /v fAllowToGetHelp /t REG_DWORD /d 1 /f
reg add "HKLM\System\CurrentControlSet\Control\Terminal Server" /v fAllowToGetHelp /t REG_DWORD /d 1 /f
cleanup_command: |
reg delete HKLM\System\CurrentControlSet\Control\Terminal Server /v fAllowToGetHelp /f >nul 2>&1
reg delete "HKLM\System\CurrentControlSet\Control\Terminal Server" /v fAllowToGetHelp /f >nul 2>&1
name: command_prompt
elevation_required: true
- name: NetWire RAT Registry Key Creation