diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index d7638cee..21cad376 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -37690,7 +37690,8 @@ privilege-escalation: - description: 'AltWinSock2DLL DLL must exist on disk at specified at PathToAtomicsFolder\T1546\bin\AltWinSock2DLL.dll ' - prereq_command: 'if (Test-Path "#{helper_file}") { exit 0} else { exit 1} + prereq_command: 'if (Test-Path PathToAtomicsFolder\T1546\bin\AltWinSock2DLL.dll) + { exit 0} else { exit 1} ' get_prereq_command: | @@ -60475,7 +60476,8 @@ persistence: - description: 'AltWinSock2DLL DLL must exist on disk at specified at PathToAtomicsFolder\T1546\bin\AltWinSock2DLL.dll ' - prereq_command: 'if (Test-Path "#{helper_file}") { exit 0} else { exit 1} + prereq_command: 'if (Test-Path PathToAtomicsFolder\T1546\bin\AltWinSock2DLL.dll) + { exit 0} else { exit 1} ' get_prereq_command: | diff --git a/atomics/T1546/T1546.md b/atomics/T1546/T1546.md index fa7687b6..785a75cd 100644 --- a/atomics/T1546/T1546.md +++ b/atomics/T1546/T1546.md @@ -47,7 +47,7 @@ Set-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters -Na ##### Description: AltWinSock2DLL DLL must exist on disk at specified at PathToAtomicsFolder\T1546\bin\AltWinSock2DLL.dll ##### Check Prereq Commands: ```powershell -if (Test-Path "#{helper_file}") { exit 0} else { exit 1} +if (Test-Path PathToAtomicsFolder\T1546\bin\AltWinSock2DLL.dll) { exit 0} else { exit 1} ``` ##### Get Prereq Commands: ```powershell