Thomas de Brelaz
c1a2085e18
T1547.005 ( #2504 )
...
* updating atomics count in README.md [ci skip]
* fixed old test which was doing a cleanup during execution by saving old values to a temporary key value which can get called later
* removed acronym from name and changed argument name to standard 'payload'
* test using .dll from T1547.002 prevented system restart. reverted test to just creating registry keys but added instructions on how to execute using mimikatz
---------
Co-authored-by: publish bot <opensource@redcanary.com >
Co-authored-by: Thomas De Brelaz <thomas.de-brelaz@ubisoft.com >
2023-08-01 15:19:06 -06:00
..
2023-07-12 03:00:11 +00:00
2023-06-15 19:53:19 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2022-09-23 22:57:18 +00:00
2023-05-31 20:51:23 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-03-17 19:58:12 +00:00
2023-05-31 20:51:23 +00:00
2023-06-15 22:33:14 +00:00
2023-06-15 22:33:14 +00:00
2023-02-13 23:11:19 +00:00
2023-07-12 02:38:27 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-03-22 22:30:32 +00:00
2023-02-13 23:11:19 +00:00
2023-05-31 20:51:23 +00:00
2023-05-31 20:51:23 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-16 03:55:19 +00:00
2023-02-13 23:11:19 +00:00
2022-09-23 22:57:18 +00:00
2023-02-13 23:11:19 +00:00
2022-09-23 22:57:18 +00:00
2022-09-23 22:57:18 +00:00
2022-09-23 22:57:18 +00:00
2023-05-31 20:51:23 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-07-31 10:26:49 -06:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-05-31 20:51:23 +00:00
2023-06-15 19:53:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2022-09-23 22:57:18 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-07-12 02:38:27 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-14 11:32:38 -07:00
2023-02-13 16:10:37 -07:00
2023-06-15 16:17:12 +00:00
2023-06-26 20:31:24 +00:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-06-10 05:19:16 +00:00
2023-05-19 17:06:33 +00:00
2023-03-23 14:42:04 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-04-13 22:27:29 +00:00
2023-04-15 01:13:35 +00:00
2023-06-23 22:43:43 +00:00
2023-06-26 22:18:47 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-06-26 20:31:24 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-06-23 22:43:43 +00:00
2023-06-09 22:36:42 +00:00
2023-07-25 21:54:21 +10:00
2023-05-19 17:06:33 +00:00
2023-06-15 19:53:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-08-01 13:22:35 -06:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2022-12-20 16:01:17 +00:00
2022-06-16 22:47:00 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2022-02-21 17:35:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-06-26 20:31:24 +00:00
2023-05-19 17:06:33 +00:00
2021-12-09 18:42:48 +00:00
2023-01-10 12:42:35 +00:00
2023-05-19 17:06:33 +00:00
2023-01-10 12:42:35 +00:00
2023-06-01 20:25:44 +00:00
2023-06-09 05:20:32 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 19:53:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 19:53:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 22:33:14 +00:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-06-23 22:43:43 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-07-17 09:53:17 -06:00
2023-02-13 23:11:19 +00:00
2022-06-16 22:47:00 +00:00
2023-01-05 22:01:14 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:13:28 +00:00
2022-05-08 02:04:19 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-06-26 20:40:02 +00:00
2023-02-20 21:35:11 -07:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-04-15 01:05:54 +00:00
2023-01-05 18:17:13 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2022-06-16 22:47:00 +00:00
2022-06-16 22:47:00 +00:00
2023-06-23 23:10:43 +00:00
2023-08-01 15:19:06 -06:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-07-12 02:38:27 +00:00
2023-07-26 13:50:29 -06:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2022-09-23 22:57:18 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-07-12 02:56:51 +00:00
2023-05-19 17:06:33 +00:00
2022-09-23 22:57:18 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 19:53:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 19:53:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 19:00:19 +00:00
2022-05-13 01:21:21 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-05-19 17:06:33 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-05-19 17:06:33 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 16:17:12 +00:00
2023-06-15 19:53:19 +00:00
2022-09-23 22:57:18 +00:00
2023-02-13 23:11:19 +00:00
2023-07-31 13:53:20 -06:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-06-30 14:01:44 +00:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-06-02 01:16:22 +00:00
2023-07-17 09:35:42 -06:00
2023-07-12 02:56:51 +00:00
2023-06-26 21:55:02 +00:00
2023-02-13 23:11:19 +00:00
2023-03-20 15:12:10 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 16:17:12 +00:00
2023-02-13 23:11:19 +00:00
2023-06-15 19:53:19 +00:00
2023-07-12 03:00:11 +00:00
2023-05-19 17:06:33 +00:00
2023-07-17 13:52:23 -04:00
2023-02-13 23:11:19 +00:00
2022-09-23 22:57:18 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 23:11:19 +00:00
2023-02-13 16:10:37 -07:00
2023-02-13 23:11:19 +00:00
2023-07-12 02:38:27 +00:00
2023-02-13 23:11:19 +00:00
2023-07-12 02:56:51 +00:00
2022-09-23 22:57:18 +00:00
2023-02-13 23:11:19 +00:00
2023-04-05 02:34:59 +00:00
2023-01-09 19:44:06 +00:00
2023-05-19 17:06:33 +00:00
2023-05-19 17:06:33 +00:00
2023-02-15 20:20:24 +00:00
2023-02-16 16:27:28 +00:00
2023-05-19 17:06:33 +00:00
2023-07-12 02:56:51 +00:00
2022-05-12 22:44:51 +00:00
2022-07-25 19:59:44 +00:00
2023-05-19 17:06:33 +00:00
2023-07-12 02:59:53 +00:00