Files
atomic-red-team/atomics/T1124/T1124.yaml
T
Austin Robertson 5cb3fed680 General YAML cleanup (#305)
* Fix string interpolation from ${foo} to #{foo} across all atomics

* remove non-ASCII characters from atomics YAML

* fix erroneous input_arguments
2018-07-26 16:31:50 -06:00

36 lines
642 B
YAML

---
attack_technique: T1124
display_name: System Time Discovery
atomic_tests:
- name: System Time Discovery
description: |
Identify the system time
supported_platforms:
- windows
input_arguments:
computer_name:
description: computer name to query
type: string
default: computer1
executor:
name: command_prompt
command: |
net time \\#{computername}
w32tm /tz
- name: System Time Discovery - PowerShell
description: |
Identify the system time via PowerShell
supported_platforms:
- windows
executor:
name: powershell
command: |
powershell.exe Get-Date