From de8cc181a69be022b6ea3b261e1c8ed68f5a0a6a Mon Sep 17 00:00:00 2001 From: sree siva likhitha kothalanka <131431317+likhitha0541@users.noreply.github.com> Date: Sat, 3 Aug 2024 07:06:16 +0530 Subject: [PATCH] Update T1082.yaml (#2895) Co-authored-by: Carrie Roberts --- atomics/T1082/T1082.yaml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/atomics/T1082/T1082.yaml b/atomics/T1082/T1082.yaml index 1d83a641a8..e8ed5ab9e2 100644 --- a/atomics/T1082/T1082.yaml +++ b/atomics/T1082/T1082.yaml @@ -527,4 +527,14 @@ atomic_tests: command: sysctl -n hw.model name: sh elevation_required: false - +- name: 'operating system discovery ' + description: |- + operating system discovery using get-ciminstance + https://petri.com/getting-operating-system-information-powershell/ + supported_platforms: + - windows + executor: + command: Get-CimInstance Win32_OperatingSystem | Select-Object Caption, Version, ServicePackMajorVersion, OSArchitecture, CSName, WindowsDirectory | Out-null + name: powershell + elevation_required: false +