From 37366ea226994e9584fb32aaa4cd9267b84d6e40 Mon Sep 17 00:00:00 2001 From: Atomic Red Team doc generator Date: Wed, 21 Sep 2022 01:25:55 +0000 Subject: [PATCH] Generated docs from job=generate-docs branch=master [ci skip] --- atomics/Indexes/index.yaml | 20 ++++++++++++++++++++ atomics/T1036.003/T1036.003.md | 23 +++++++++++++++++++++++ 2 files changed, 43 insertions(+) diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 3cd72612..d8efaaab 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -20086,6 +20086,26 @@ defense-evasion: files type: Path default: PathToAtomicsFolder\T1036.003\src\T1036.003_masquerading.ps1 + dependency_executor_name: powershell + dependencies: + - description: 'File to copy must exist on disk at specified location (#{vbs_path}) + + ' + prereq_command: 'if (Test-Path #{vbs_path}) {exit 0} else {exit 1} + + ' + get_prereq_command: | + New-Item -Type Directory (split-path #{vbs_path}) -ErrorAction ignore | Out-Null + Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1036.003/src/T1036.003_masquerading.vbs" -OutFile "#{vbs_path}" + - description: 'File to copy must exist on disk at specified location (#{ps1_path}) + + ' + prereq_command: 'if (Test-Path #{ps1_path}) {exit 0} else {exit 1} + + ' + get_prereq_command: | + New-Item -Type Directory (split-path #{ps1_path}) -ErrorAction ignore | Out-Null + Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1036.003/src/T1036.003_masquerading.ps1" -OutFile "#{ps1_path}" executor: command: | copy #{exe_path} %temp%\T1036.003_masquerading.docx.exe /Y diff --git a/atomics/T1036.003/T1036.003.md b/atomics/T1036.003/T1036.003.md index fafb3606..52d6a150 100644 --- a/atomics/T1036.003/T1036.003.md +++ b/atomics/T1036.003/T1036.003.md @@ -393,6 +393,29 @@ del /f %temp%\T1036.003_masquerading.rtf.ps1 > nul 2>&1 +#### Dependencies: Run with `powershell`! +##### Description: File to copy must exist on disk at specified location (#{vbs_path}) +##### Check Prereq Commands: +```powershell +if (Test-Path #{vbs_path}) {exit 0} else {exit 1} +``` +##### Get Prereq Commands: +```powershell +New-Item -Type Directory (split-path #{vbs_path}) -ErrorAction ignore | Out-Null +Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1036.003/src/T1036.003_masquerading.vbs" -OutFile "#{vbs_path}" +``` +##### Description: File to copy must exist on disk at specified location (#{ps1_path}) +##### Check Prereq Commands: +```powershell +if (Test-Path #{ps1_path}) {exit 0} else {exit 1} +``` +##### Get Prereq Commands: +```powershell +New-Item -Type Directory (split-path #{ps1_path}) -ErrorAction ignore | Out-Null +Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1036.003/src/T1036.003_masquerading.ps1" -OutFile "#{ps1_path}" +``` + +