github.com/facebookincubator/ttpforge@v1.0.13-0.20240405153150-5ae801628835/docs/foundations/actions/file.md (about) 1 # TTPForge Actions: `file` 2 3 The `file` action will execute the specified executable file using Golang's 4 `os/exec` package. Think of it like executing the file in a shell, but more 5 stealthy - this activity should be visible in process execution telemetry but 6 not in shell history. It's similar to using `execute -o program` in 7 [Sliver C2](https://github.com/BishopFox/sliver). 8 9 ## Fields 10 11 You can specify the following fields for the `file:` action: 12 13 - `file:` (type: `string`) the path to the file to execute. 14 - `args:` (type: `list`) list of strings to pass as arguments to the invoked 15 program.