New atomic added. (#2970)

* New atomic added. * Update T1082.yaml --------- Co-authored-by: Carrie Roberts <[email protected]>
redcanaryco · Nov 5, 2024 · 67f47a0 · 67f47a0
1 parent bb351c1
commit 67f47a0
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/atomics/T1082/T1082.yaml b/atomics/T1082/T1082.yaml
@@ -569,3 +569,12 @@ atomic_tests:
     cleanup_command: |
       cmd.exe /c del "%TMP%\a.txt"
     
+- name: Enumerate Available Drives via gdr
+  description: |
+    This test simulates an attacker attempting to list the available drives on the system to gather data about file storage locations.
+  supported_platforms:
+  - windows
+  executor:
+    name: command_prompt
+    command: |
+      powershell.exe -c "gdr -PSProvider 'FileSystem'"