diff --git a/atomics/T1546.003/T1546.003.yaml b/atomics/T1546.003/T1546.003.yaml index 63039ee4..4ac3b12a 100644 --- a/atomics/T1546.003/T1546.003.yaml +++ b/atomics/T1546.003/T1546.003.yaml @@ -109,6 +109,13 @@ atomic_tests: if (Test-Path "#{mofcomp_path}") { exit 0} else { exit 1} get_prereq_command: | Validate MOFComp.exe is on disk somewhere and update input argument. + - description: | + MofComp.exe must exist on disk at specified location (#{mof_file}) + prereq_command: | + if (Test-Path "#{mof_file}") { exit 0} else { exit 1} + get_prereq_command: | + New-Item -Type Directory (split-path #{mof_file}) -ErrorAction ignore | Out-Null + Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1546.003/src/T1546.003.mof" -OutFile "#{mof_file}" executor: command: | #{mofcomp_path} #{mof_file}