Brian Thacker
ffecea355a
T1204.002 new atomic office bat ( #1305 )
...
* Update T1204.002.yaml
Added a new atomic to simulate an adversary using a malicious word doc to stage malicious .bat files in appdata then execute them.
* Update T1204.002.yaml
made default ms_office_version more robust to handle box with multiple versions of office. It will select the latest
* Update T1204.002.yaml
added in the description what the .bat does
2020-11-30 16:37:26 -07:00
..
2020-11-30 14:34:25 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-24 08:15:20 -06:00
2020-10-24 08:15:58 -06:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00
2020-10-29 22:54:55 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-15 16:28:04 +00:00
2020-11-30 14:34:25 -07:00
2020-11-30 09:18:32 -07:00
2020-11-09 16:41:52 +00:00
2020-09-29 13:53:28 +00:00
2020-10-24 08:17:34 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-29 22:54:55 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-09 16:41:52 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-12 13:40:23 -07:00
2020-10-24 08:19:12 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-12 13:40:23 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-12 13:40:23 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-08 13:39:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-09 16:41:52 +00:00
2020-11-12 13:40:23 -07:00
2020-09-29 13:53:28 +00:00
2020-10-08 13:45:04 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00
2020-10-29 22:54:55 -06:00
2020-10-22 14:34:31 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-29 22:54:55 -06:00
2020-10-29 22:54:55 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-12 13:40:23 -07:00
2020-09-29 13:53:28 +00:00
2020-10-29 22:54:55 -06:00
2020-11-30 16:37:26 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 15:47:51 +00:00
2020-11-30 09:18:32 -07:00
2020-10-22 14:34:31 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-22 14:34:31 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00
2020-09-29 13:53:28 +00:00
2020-11-09 16:41:52 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-29 22:54:55 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-04 08:30:24 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00
2020-09-29 13:53:28 +00:00
2020-10-06 16:13:36 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-29 22:54:55 -06:00
2020-11-12 13:40:23 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-12 13:40:23 -07:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-12 13:40:23 -07:00
2020-10-29 22:54:55 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-10-29 22:54:55 -06:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-09-29 13:53:28 +00:00
2020-11-12 13:40:23 -07:00
2020-11-30 09:18:32 -07:00
2020-09-29 13:53:28 +00:00
2020-11-30 09:18:32 -07:00