From 0cea1e630983cf7d38d73f8cb9bc54cdc3d81018 Mon Sep 17 00:00:00 2001 From: htngork Date: Fri, 10 May 2024 10:50:13 -0700 Subject: [PATCH] Created T1016.002 atomic (#2762) * Create T1016.002.yaml * Update T1016.002.yaml --------- Co-authored-by: Carrie Roberts --- atomics/T1016.002/T1016.002.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 atomics/T1016.002/T1016.002.yaml diff --git a/atomics/T1016.002/T1016.002.yaml b/atomics/T1016.002/T1016.002.yaml new file mode 100644 index 0000000000..b07b04bc15 --- /dev/null +++ b/atomics/T1016.002/T1016.002.yaml @@ -0,0 +1,13 @@ +attack_technique: T1016.002 +display_name: "System Network Configuration Discovery: Wi-Fi Discovery" +atomic_tests: +- name: Enumerate Stored Wi-Fi Profiles And Passwords via netsh + auto_generated_guid: + description: Upon successful execution, information about previously connected Wi-Fi networks will be displayed with their corresponding key (if present). + supported_platforms: + - windows + executor: + command: netsh wlan show profile * key=clear + cleanup_command: + name: command_prompt + elevation_required: false