Procedure Text for Step 14.A.1 (Remote File Copy) needs to be updated

mitre-attack / attack-evals

ATT&CK Evaluations website (DEPRECATED)

https://attackevals.mitre.org

59 stars 24 forks source link

Procedure Text for Step 14.A.1 (Remote File Copy) needs to be updated #11

Closed JeffJLi closed 5 years ago

JeffJLi commented 5 years ago

The procedure text shown on the website for 14.A.1 (Remote File Copy) is inaccurate and needs to be updated. The wdbypass file was not written to disk, it lives in memory.

JeffJLi commented 5 years ago

FIXED: The procedure text for step 14.A.1 (Remote File Copy) was updated in the Operational Flow, technique summary tables, tactic summary tables, and results JSON. This was strictly a change in the text describing the procedure for Step 14.A.1; the procedure itself was not changed.