Skip to content

Commit

Permalink
bypass UAC via scheduled task environment variable: fix ATT&CK mapping
Browse files Browse the repository at this point in the history
  • Loading branch information
williballenthin authored Jul 13, 2021
1 parent 1be8f80 commit 2750b05
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ rule:
author: [email protected]
scope: function
att&ck:
- Defense Evasion::Abuse Elevation Control Mechanism::Bypass User Access Control [T1548.002]
- Defense Evasion::Abuse Elevation Control Mechanism::Bypass User Account Control [T1548.002]
references:
- https://www.tiraniddo.dev/2017/05/exploiting-environment-variables-in.html
- https://enigma0x3.net/2016/07/22/bypassing-uac-on-windows-10-using-disk-cleanup
Expand Down

0 comments on commit 2750b05

Please sign in to comment.