diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 2bdc120b..b9810037 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -83854,6 +83854,18 @@ discovery: description: Path to sample script type: String default: PathToAtomicsFolder\T1082\src\griffon_recon.vbs + dependency_executor_name: powershell + dependencies: + - description: 'Sample script file must exist on disk at specified location + (#{vbscript}) + + ' + prereq_command: 'if (Test-Path #{vbscript}) {exit 0} else {exit 1} + + ' + get_prereq_command: | + New-Item -Type Directory (split-path #{vbscript}) -ErrorAction ignore | Out-Null + Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1082/src/griffon_recon.vbs" -OutFile "#{vbscript}" executor: command: 'cscript #{vbscript}' name: powershell diff --git a/atomics/T1082/T1082.md b/atomics/T1082/T1082.md index 07a6e3e3..f3ce3386 100644 --- a/atomics/T1082/T1082.md +++ b/atomics/T1082/T1082.md @@ -340,6 +340,19 @@ cscript #{vbscript} +#### Dependencies: Run with `powershell`! +##### Description: Sample script file must exist on disk at specified location (#{vbscript}) +##### Check Prereq Commands: +```powershell +if (Test-Path #{vbscript}) {exit 0} else {exit 1} +``` +##### Get Prereq Commands: +```powershell +New-Item -Type Directory (split-path #{vbscript}) -ErrorAction ignore | Out-Null +Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1082/src/griffon_recon.vbs" -OutFile "#{vbscript}" +``` + +