From 5c710cc04ee44772b56dbfd2e3f88efc60284458 Mon Sep 17 00:00:00 2001 From: Noy-s1 <81627842+Noy-s1@users.noreply.github.com> Date: Tue, 20 Dec 2022 18:00:42 +0200 Subject: [PATCH] Fixed Automated Collection Command Prompt variable call (#2259) * Fixed Automated Collection Command Prompt variable call While using the commands from a batch file the old code wont work because of the way the variable is being called. The addition of '%' fixed the issue. * Update T1119.yaml * add slash * Update T1564.004.yaml * Update T1564.004.yaml Co-authored-by: Carrie Roberts --- atomics/T1119/T1119.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1119/T1119.yaml b/atomics/T1119/T1119.yaml index 82c9b8e7..0c353520 100644 --- a/atomics/T1119/T1119.yaml +++ b/atomics/T1119/T1119.yaml @@ -12,7 +12,7 @@ atomic_tests: command: | mkdir %temp%\T1119_command_prompt_collection >nul 2>&1 dir c: /b /s .docx | findstr /e .docx - for /R c: %f in (*.docx) do copy %f %temp%\T1119_command_prompt_collection + for /R c:\ %f in (*.docx) do copy /Y %f %temp%\T1119_command_prompt_collection cleanup_command: | del %temp%\T1119_command_prompt_collection /F /Q >nul 2>&1 name: command_prompt