Carrie Roberts
1bfefdacfc
* provide elevation_required attribute * provide elevation_required attribute * provide elevation_required attribute
19 lines
417 B
YAML
19 lines
417 B
YAML
---
|
|
attack_technique: T1214
|
|
display_name: Credentials in Registry
|
|
|
|
atomic_tests:
|
|
- name: Enumeration for Credentials in Registry
|
|
description: |
|
|
Queries to enumerate for credentials in the Registry.
|
|
|
|
supported_platforms:
|
|
- windows
|
|
|
|
executor:
|
|
name: command_prompt
|
|
elevation_required: false
|
|
command: |
|
|
reg query HKLM /f password /t REG_SZ /s
|
|
reg query HKCU /f password /t REG_SZ /s
|