security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use external payloads directory (#2554)

Browse Source 
Co-authored-by: Hare Sudhan <code@0x6c.dev>
This commit is contained in:
Carrie Roberts
2023-10-07 13:25:51 -06:00
committed by GitHub
parent a08834a85c
commit 62f83972c5
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1027/T1027.yaml
+2 -3
View File
@@ -111,11 +111,10 @@ atomic_tests:
Expand-Archive -path "PathToAtomicsFolder\..\ExternalPayloads\T1027.zip" -DestinationPath "PathToAtomicsFolder\..\ExternalPayloads\temp_T1027.zip\" -Force
executor:
command: |
"%temp%\temp_T1027.zip\T1027.exe"
"PathToAtomicsFolder\..\ExternalPayloads\temp_T1027.zip\T1027.exe"
cleanup_command: |
taskkill /f /im calculator.exe >nul 2>nul
rmdir /S /Q %temp%\temp_T1027.zip >nul 2>nul
del /Q "%temp%\T1027.zip" >nul 2>nul
taskkill /f /im CalculatorApp.exe >nul 2>nul
name: command_prompt
- name: DLP Evasion via Sensitive Data in VBA Macro over email
auto_generated_guid: 129edb75-d7b8-42cd-a8ba-1f3db64ec4ad