Merge pull request mandiant#2 from luvhalvorson/master

Modify sample commands of schtask to show the result better
AndrewRathbun · Oct 4, 2019 · 29e23d6 · 29e23d6
2 parents 0deca6a + 965a261
commit 29e23d6
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/README.md b/README.md
@@ -126,9 +126,9 @@ The below 3rd party libraries are used in this project.
 
 **Scheduled Task**
 
-`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c calc.exe" -n "Some Task" -m add`
+`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c echo 123 >> c:\123.txt" -n "Some Task" -m add`
 
-`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c calc.exe" -n "Some Task" -m add -o hourly`
+`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c echo 123 >> c:\123.txt" -n "Some Task" -m add -o hourly`
 
 
 ## Removing Persistence Triggers (Remove)
@@ -213,9 +213,9 @@ The below 3rd party libraries are used in this project.
 
 **Scheduled Task**
 
-`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c calc.exe" -n "Some Task" -m check`
+`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c echo 123 >> c:\123.txt" -n "Some Task" -m check`
 
-`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c calc.exe" -n "Some Task" -m check -o hourly`
+`SharPersist -t schtask -c "C:\Windows\System32\cmd.exe" -a "/c echo 123 >> c:\123.txt" -n "Some Task" -m check -o hourly`
 
 
 ## List Persistence Trigger Entries (List)