From 73fc63390e5192169d5e99e1829d8e053f612173 Mon Sep 17 00:00:00 2001
From: yk <yukai@vista.aero>
Date: Fri, 29 Oct 2021 15:36:03 +0800
Subject: [PATCH] Added support for "put-and-run" if Crowdstrike allows it to
 be used via API in the future

---
 helpers.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helpers.py b/helpers.py
index e76de48..97f90ec 100644
--- a/helpers.py
+++ b/helpers.py
@@ -9,7 +9,7 @@
 active_responder = ['cp', 'encrypt', 'get', 'kill', 'map', 'memdump', 'mkdir', 'mv', 'reg set' 'reg delete', 'reg load'
                     'reg unload', 'restart', 'rm', 'shutdown', 'tar', 'umount', 'unmap', 'update',
                     'xmemdump', 'zip']
-rtr_admin = ['put', 'run', 'runscript']
+rtr_admin = ['put', 'run', 'runscript', 'put-and-run']
 
 
 def to_readable(num, suffix='B'):