Add "in the wild" reference to "Execute Commands on Virtual Machine using Run Command"

[christophetd]

https://stratus-red-team.cloud/attack-techniques/azure/azure.execution.vm-run-command/ https://cloud.google.com/blog/topics/threat-intelligence/russian-targeting-gov-business

[lsass-exe]

Hello @christophetd, I would like to contribute to this issue.

Is it literally adding this to the References section with seen in the wild in brackets?

Do we tag techniques observed ITW for easy searching/reference for users?

Many thanks

[christophetd]

That's correct! Updating the code and running make docs to autogenerate the docs. Appreciate the future contribution!

[christophetd]

sample PR: https://github.com/DataDog/stratus-red-team/pull/493/files