Updated with PowerPick

Execute-Assembly
Harley Lebeau 2018-02-09 12:18:55 -07:00 committed by GitHub
parent 0dbc8bb1d3
commit 5268c38bf2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -16,7 +16,7 @@ beacon_command_register("AV_Query", "Queries the Registry for AV Installed",
alias AV_Query {
blog($1, "\cBDetermining what AntiVirus is installed...");
bpowershell!($1, $powershellcmd);
bshell!($1, "wmic /Namespace:\\\\root\\SecurityCenter2 Path AntiVirusProduct Get displayName,pathtoSignedProductExe");
bpowerpick!($1, $powershellcmd);
bpowerpick!($1, "wmic /Namespace:\\\\root\\SecurityCenter2 Path AntiVirusProduct Get displayName,pathtoSignedProductExe");
}