first commit

documentation-payload/apollo/commands/ticket_store_add.md

@@ -0,0 +1,37 @@
++++
+title = "ticket_store_add"
+chapter = false
+weight = 103
+hidden = false
++++
+
+{{% notice info %}}
+Artifacts Generated:  WindowsAPIInvoke
+{{% /notice %}}
+
+## Summary
+Add a new ticket to the agents internal ticket store. The supplied ticket should be a base64 encoded ticket. 
+The ticket will be loaded into a temp logon session and extracted to repopulate all relevant information. 
+
+
+### Arguments
+
+
+#### B64ticket 
+The base64 ticket value of the ticket to add to the store
+
+
+
+## Usage
+```
+ticket_store_add -base64ticket [ticketValue]
+```
+
+Example
+```
+ticket_store_add -base64ticket [ticketValue]
+```
+
+## MITRE ATT&CK Mapping
+
+- T1550