Files
Ares-mythic/documentation-payload/ares/commands/powerpick.md
Aryma 03d283cf49 refactor(payload): rename apollo to ares and update documentation
This commit renames the Apollo payload type to Ares, moving all associated files and updating documentation accordingly. The change includes:
- Renaming directories from `apollo` to `ares`
- Updating documentation image references
- Maintaining the same code functionality while changing the payload name
- Adding new Ares-specific documentation files
- Removing old Apollo documentation files

The rename is done to reflect the new payload name while preserving all existing functionality.
2026-04-14 14:02:44 +07:00

30 lines
588 B
Markdown

+++
title = "powerpick"
chapter = false
weight = 103
hidden = false
+++
{{% notice info %}}
Artifacts Generated: Process Create, Process Inject, Process Kill
{{% /notice %}}
## Summary
Execute PowerShell commands as post-exploitation job. This command will import the most recently registered `*.ps1` file registered using `register_file` and import it into the PowerShell runspace before execution.
### Arguments (Positional)
#### command
PowerShell command to be executed.
## Usage
```
powerpick [command]
powerpick -Command [command]
```
## MITRE ATT&CK Mapping
- T1059
- T1562