Update T1012.yaml (#1255)

Removed extra spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
This commit is contained in:
Micheal Fleck
2020-10-15 09:27:40 -07:00
committed by GitHub
parent acda0a41f6
commit fde64c6173
-6
View File
@@ -5,17 +5,11 @@ atomic_tests:
auto_generated_guid: 8f7578c4-9863-4d83-875c-a565573bbdf0
description: |
Query Windows Registry.
Upon successful execution, cmd.exe will perform multiple reg queries. Some will succeed and others will fail (dependent upon OS).
References:
https://blog.cylance.com/windows-registry-persistence-part-2-the-run-keys-and-search-order
https://blog.cylance.com/windows-registry-persistence-part-1-introduction-attack-phases-and-windows-services
http://www.handgrep.se/repository/cheatsheets/postexploitation/WindowsPost-Exploitation.pdf
https://www.offensive-security.com/wp-content/uploads/2015/04/wp.Registry_Quick_Find_Chart.en_us.pdf
supported_platforms:
- windows