5cb3fed680
* Fix string interpolation from ${foo} to #{foo} across all atomics
* remove non-ASCII characters from atomics YAML
* fix erroneous input_arguments
36 lines
642 B
YAML
36 lines
642 B
YAML
---
|
|
attack_technique: T1124
|
|
display_name: System Time Discovery
|
|
|
|
atomic_tests:
|
|
- name: System Time Discovery
|
|
description: |
|
|
Identify the system time
|
|
|
|
supported_platforms:
|
|
- windows
|
|
|
|
input_arguments:
|
|
computer_name:
|
|
description: computer name to query
|
|
type: string
|
|
default: computer1
|
|
|
|
executor:
|
|
name: command_prompt
|
|
command: |
|
|
net time \\#{computername}
|
|
w32tm /tz
|
|
|
|
- name: System Time Discovery - PowerShell
|
|
description: |
|
|
Identify the system time via PowerShell
|
|
|
|
supported_platforms:
|
|
- windows
|
|
|
|
executor:
|
|
name: powershell
|
|
command: |
|
|
powershell.exe Get-Date
|