Update T1027.yaml (#1418)

Because, powershell executor

Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
This commit is contained in:
Ryan
2021-04-08 07:22:23 -06:00
committed by GitHub
parent a2b44e6026
commit 7ac896f82a
+2 -2
View File
@@ -81,7 +81,7 @@ atomic_tests:
exe_payload:
description: EXE to execute
type: Path
default: '%temp%\temp_T1027.zip\T1027.exe'
default: '$env:temp\temp_T1027.zip\T1027.exe'
url_path:
description: url to download Exe
type: url
@@ -89,7 +89,7 @@ atomic_tests:
dependency_executor_name: powershell
dependencies:
- description: |
T1027.exe must exist on disk at specified location
T1027.exe must exist on disk at #{exe_payload}
prereq_command: |
if (Test-Path #{exe_payload}) {exit 0} else {exit 1}
get_prereq_command: |