Josh Rickard
40 lines
1.1 KiB
YAML
40 lines
1.1 KiB
YAML
attack_technique: T1124
|
|
display_name: System Time Discovery
|
|
atomic_tests:
|
|
- name: System Time Discovery
|
|
auto_generated_guid: 20aba24b-e61f-4b26-b4ce-4784f763ca20
|
|
description: |
|
|
Identify the system time. Upon execution, the local computer system time and timezone will be displayed.
|
|
supported_platforms:
|
|
- windows
|
|
input_arguments:
|
|
computer_name:
|
|
description: computer name to query
|
|
type: String
|
|
default: localhost
|
|
executor:
|
|
command: |
|
|
net time \\#{computer_name}
|
|
w32tm /tz
|
|
name: command_prompt
|
|
- name: System Time Discovery - PowerShell
|
|
auto_generated_guid: 1d5711d6-655c-4a47-ae9c-6503c74fa877
|
|
description: |
|
|
Identify the system time via PowerShell. Upon execution, the system time will be displayed.
|
|
supported_platforms:
|
|
- windows
|
|
executor:
|
|
command: |
|
|
Get-Date
|
|
name: powershell
|
|
- name: System Time Discovery in macOS
|
|
auto_generated_guid: f449c933-0891-407f-821e-7916a21a1a6f
|
|
description: |
|
|
Identify system time. Upon execution, the local computer system time and timezone will be displayed.
|
|
supported_platforms:
|
|
- macos
|
|
executor:
|
|
command: |
|
|
date
|
|
name: sh
|