2017-10-11 17:35:17 +00:00
|
|
|
## File and Directory Discovery
|
|
|
|
|
|
|
|
|
|
MITRE ATT&CK Technique: [T1083](https://attack.mitre.org/wiki/Technique/T1083)
|
|
|
|
|
|
|
|
|
|
### Directory listing
|
|
|
|
|
|
|
|
|
|
Input:
|
|
|
|
|
|
2017-11-13 18:02:39 +00:00
|
|
|
dir /s c:\ >> %temp%\download
|
|
|
|
|
dir /s "c:\Documents and Settings" >> %temp%\download
|
|
|
|
|
dir /s "c:\Program Files\" >> %temp%\download
|
|
|
|
|
dir /s d:\ >> %temp%\download
|
2018-01-11 10:09:24 +00:00
|
|
|
dir "%systemdrive%\Users\*.*"
|
|
|
|
|
dir "%userprofile%\AppData\Roaming\Microsoft\Windows\Recent\*.*"
|
|
|
|
|
dir "%userprofile%\Desktop\*.*"
|
