github.com/facebookincubator/ttpforge@v1.0.13-0.20240405153150-5ae801628835/docs/foundations/actions/file.md (about)

     1  # TTPForge Actions: `file`
     2  
     3  The `file` action will execute the specified executable file using Golang's
     4  `os/exec` package. Think of it like executing the file in a shell, but more
     5  stealthy - this activity should be visible in process execution telemetry but
     6  not in shell history. It's similar to using `execute -o program` in
     7  [Sliver C2](https://github.com/BishopFox/sliver).
     8  
     9  ## Fields
    10  
    11  You can specify the following fields for the `file:` action:
    12  
    13  - `file:` (type: `string`) the path to the file to execute.
    14  - `args:` (type: `list`) list of strings to pass as arguments to the invoked
    15    program.