moved remote file used in test to src - no other changes (#754)
* updating per spec to src directory -note did not change to PathToAtomic, because the author's idea here was to download the payload "remotely" * moved file Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
This commit is contained in:
@@ -14,7 +14,7 @@ atomic_tests:
|
||||
remote_payload:
|
||||
description: A remote payload to execute using PubPrn.vbs.
|
||||
type: Url
|
||||
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/payloads/T1216.sct
|
||||
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/src/T1216.sct
|
||||
|
||||
executor:
|
||||
name: command_prompt
|
||||
@@ -62,4 +62,4 @@ atomic_tests:
|
||||
set comspec=#{command_to_execute}
|
||||
cscript manage-bde.wsf
|
||||
cleanup_command: | # you can remove the cleanup_command section if there are no cleanup commands
|
||||
set comspec=C:\Windows\System32\cmd.exe
|
||||
set comspec=C:\Windows\System32\cmd.exe
|
||||
|
||||
@@ -20,4 +20,4 @@
|
||||
]]>
|
||||
</script>
|
||||
</registration>
|
||||
</scriptlet>
|
||||
</scriptlet>
|
||||
Reference in New Issue
Block a user