Closed krdmnbrk closed 1 week ago
Details: This atomic enumerates drivers on Windows via the gdr PowerShell command. It simulates attackers gathering file storage information.
gdr
Testing: Validated on Windows by running powershell.exe -c "gdr -PSProvider 'FileSystem'" to confirm accurate drive listing.
powershell.exe -c "gdr -PSProvider 'FileSystem'"
Screenshot below
Details: This atomic enumerates drivers on Windows via the
gdrPowerShell command. It simulates attackers gathering file storage information.Testing: Validated on Windows by running
powershell.exe -c "gdr -PSProvider 'FileSystem'"to confirm accurate drive listing.Screenshot below