Files
atomic-red-team/atomics/T1138/T1138.yaml
T
caseysmithrc fe502ed03c T1138 yamilze
2018-05-23 21:25:36 -06:00

17 lines
314 B
YAML

---
attack_technique: T1138
display_name: Application Shimming
atomic_tests:
- name: Application Shim Installation
description: |
This test injects a DLL into a custom application
supported_platforms:
- windows
executor:
name: command_prompt
command: |
sdbinst.exe AtomicShimx86.sdb