Files
atomic-red-team/atomics
Brian Thacker ffecea355a T1204.002 new atomic office bat (#1305)
* Update T1204.002.yaml

Added a new atomic to simulate an adversary using a malicious word doc to stage malicious .bat files in appdata then execute them.

* Update T1204.002.yaml

made default ms_office_version more robust to handle box with multiple versions of office. It will select the latest

* Update T1204.002.yaml

added in the description what the .bat does
2020-11-30 16:37:26 -07:00
..
2020-10-24 08:15:58 -06:00
2020-11-30 09:18:32 -07:00
2020-11-30 09:18:32 -07:00
2020-10-24 08:17:34 -06:00
2020-11-30 09:18:32 -07:00
2020-11-30 09:18:32 -07:00
2020-10-24 08:19:12 -06:00
2020-11-30 09:18:32 -07:00
2020-11-30 09:18:32 -07:00
2020-11-30 09:18:32 -07:00
2020-11-30 09:18:32 -07:00
2020-11-04 08:30:24 -07:00
2020-11-30 09:18:32 -07:00
2020-11-30 09:18:32 -07:00
2020-11-30 09:18:32 -07:00