Bhavin Patel

also, can you perhaps attach the execution of the screenshot in this PR and move this atomic to the specific sub atomic specific T1548.002: https://attack.mitre.org/techniques/T1548/002/

i have added your atomics to this MR as we saw no updates in here : https://github.com/redcanaryco/atomic-red-team/pull/2655 thank you for contributing these atomics!

Hello @PhyoPaingHtun : thanks for contributing this atomic. Can you please add the screenshots of the execution of this atomic?

Closing this PR since this TTP is already covered in `T1548.002.yaml`. Thank you!

@ionsor : I think it's a great idea and it would certainly make easier! we will have evaluate how to programmatically add these fields. With that said, we currently use...

@dluxtron : Hey buddy! Can we fix up the conflicts in this PR?

You can ignore the changes in `dist/` since those files are generated automatically so you can remove those changes from dist/

Hello @githubonlyy : We tested this detection with the given attack data and noticed that we do not have the field called Caller Computer Name in our logs It seems...

Did you want src as an output in the SPL. Here's what is looks like in our test env 

@pyth0n1c : We should add this to contentctl