Files
atomic-red-team/atomics/T1124/T1124.yaml
T
Carrie Roberts 1bfefdacfc Add elevated (#542)
* provide elevation_required attribute

* provide elevation_required attribute

* provide elevation_required attribute
2019-09-03 07:34:42 -06:00

38 lines
688 B
YAML

---
attack_technique: T1124
display_name: System Time Discovery
atomic_tests:
- name: System Time Discovery
description: |
Identify the system time
supported_platforms:
- windows
input_arguments:
computer_name:
description: computer name to query
type: string
default: computer1
executor:
name: command_prompt
elevation_required: false
command: |
net time \\#{computer_name}
w32tm /tz
- name: System Time Discovery - PowerShell
description: |
Identify the system time via PowerShell
supported_platforms:
- windows
executor:
name: powershell
elevation_required: false
command: |
Get-Date