From 06b210f766f2827aabc4ec49221087be67f62665 Mon Sep 17 00:00:00 2001 From: caseysmithrc <30840394+caseysmithrc@users.noreply.github.com> Date: Wed, 1 Nov 2017 17:11:21 -0600 Subject: [PATCH] certutil fix --- .../Defense Evasion/Deobfuscate_Decode_Files_Or_Information.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Windows/Defense Evasion/Deobfuscate_Decode_Files_Or_Information.md b/Windows/Defense Evasion/Deobfuscate_Decode_Files_Or_Information.md index ffcd427..cc08ef0 100644 --- a/Windows/Defense Evasion/Deobfuscate_Decode_Files_Or_Information.md +++ b/Windows/Defense Evasion/Deobfuscate_Decode_Files_Or_Information.md @@ -3,7 +3,7 @@ MITRE ATT&CK Technique: [T1140](https://attack.mitre.org/wiki/Technique/T1140) ## Example encode executable - certuil.exe -encode file.exe file.txt + certutil.exe -encode file.exe file.txt ## Example decode executable certutil.exe -decode file.txt file.exe