From 34f36da8f3c882508bb7ff5dff53ac6fa2db2369 Mon Sep 17 00:00:00 2001
From: Carrie Roberts <clr2of8@gmail.com>
Date: Mon, 9 Mar 2020 09:48:56 -0600
Subject: [PATCH] make verifyhash function available to prereq (#859)

---
 atomics/T1003/T1003.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/atomics/T1003/T1003.yaml b/atomics/T1003/T1003.yaml
index 2be1d1bd..e5913c61 100644
--- a/atomics/T1003/T1003.yaml
+++ b/atomics/T1003/T1003.yaml
@@ -90,6 +90,7 @@ atomic_tests:
         if (Test-Path #{wce_exe}) {exit 0} else {exit 1}
       get_prereq_command: |
         $parentpath = Split-Path "#{wce_exe}"; $zippath = "$parentpath\wce.zip"
+        IEX(IWR "https://raw.githubusercontent.com/redcanaryco/invoke-atomicredteam/master/Public/Invoke-WebRequestVerifyHash.ps1")
         if(Invoke-WebRequestVerifyHash "#{wce_url}" "$zippath" #{wce_zip_hash}){
           Expand-Archive $zippath $parentpath\wce -Force
           Move-Item $parentpath\wce\wce.exe "#{wce_exe}"