From 21888d12fc4f9afb0cd5ee2f0266f0a2893aa0bc Mon Sep 17 00:00:00 2001 From: Hare Sudhan Muthusamy Date: Thu, 25 Jun 2020 11:08:25 -0600 Subject: [PATCH] Typo fix (#1080) * Fixed execution issue and added cleanup command * Cleanup command added * Added cleanup command * Typo fix --- atomics/T1033/T1033.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1033/T1033.yaml b/atomics/T1033/T1033.yaml index 6bbbec8b..ff657bfb 100644 --- a/atomics/T1033/T1033.yaml +++ b/atomics/T1033/T1033.yaml @@ -21,7 +21,7 @@ atomic_tests: wmic useraccount get /ALL quser /SERVER:"#{computer_name}" quser - qwinsta.exe" /server:#{computer_name} + qwinsta.exe /server:#{computer_name} qwinsta.exe for /F "tokens=1,2" %i in ('qwinsta /server:#{computer_name} ^| findstr "Active Disc"') do @echo %i | find /v "#" | find /v "console" || echo %j > usernames.txt @FOR /F %n in (computers.txt) DO @FOR /F "tokens=1,2" %i in ('qwinsta /server:%n ^| findstr "Active Disc"') do @echo %i | find /v "#" | find /v "console" || echo %j > usernames.txt