T1098: Account Manipulation

Author: Stefan Waldvogel

LimaCharlie vs. Account Manipulation

Overview:
Description from ATT&CK

Source: github.com/redcanaryco/atomic-red-team/tree/master/atomics

Commands:
Invoke-AtomicTest T1098.001 -ShowDetailsBrief​
Invoke-AtomicTest T1098.001 -CheckPrereqs
Invoke-AtomicTest T1098.001 -GetPrereqs
​Invoke-AtomicTest T1098.001 -TestNumbers 1

Invoke-AtomicTest T1098.001 -Cleanup​

Changes:
-none-

​Limitations:
​
Results:
This section has x subtests.
​Invoke-AtomicTest T1098.001 -TestNumbers 1
​Invoke-AtomicTest T1098.001 -TestNumbers 2
​Invoke-AtomicTest T1098.001 -TestNumbers 3
​Invoke-AtomicTest T1098.001 -TestNumbers 4
​Invoke-AtomicTest T1098.001 -TestNumbers 5
​Invoke-AtomicTest T1098.001 -TestNumbers 6
​Invoke-AtomicTest T1098.001 -TestNumbers 7
​Invoke-AtomicTest T1098.001 -TestNumbers 8

Persistence

Next: T1059.003 Windows Command Shell

© 2021. This work is licensed under a CC BY-SA 4.0 license​