Skip to content

Commit

Permalink
Added new atomic. (#2969)
Browse files Browse the repository at this point in the history
Co-authored-by: Carrie Roberts <[email protected]>
  • Loading branch information
krdmnbrk and clr2of8 authored Nov 5, 2024
1 parent 84a8d03 commit aa54215
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions atomics/T1082/T1082.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -555,4 +555,16 @@ atomic_tests:
name: command_prompt
elevation_required: true
command: vssadmin.exe list shadows
- name: Identify System Locale and Regional Settings with PowerShell
description: |
This action demonstrates how an attacker might gather a system's region and language settings using PowerShell, which could aid in profiling
the machine's location and user language preferences. The command outputs system locale details to a temporary file for further analysis.
supported_platforms:
- windows
executor:
name: command_prompt
command: |
powershell.exe -c "Get-Culture | Format-List | Out-File -FilePath %TMP%\a.txt"
cleanup_command: |
cmd.exe /c del "%TMP%\a.txt"

0 comments on commit aa54215

Please sign in to comment.