PowerBAS Attacks Framework

Jump to bottom

Stary edited this page Sep 7, 2025 · 1 revision

Template

Example:

{"ATTACK_ID":{
    "idMitre":"T1592.001",
    "attackName":"Enumerate PlugNPlay Camera",
    "tags":["powershell", "discovery_info"],
    "requirements":["None"],
    "commands": ["Get-CimInstance -Query \"SELECT * FROM Win32_PnPEntity\""],
    "cleanup":["None"]
  }

ATTACK_ID:
IdMitre:
attackName:
tags:
requeriments:
commands:
cleanup:

test