diff --git a/atomics/T1216/T1216.yaml b/atomics/T1216/T1216.yaml index dc422440..44f26aec 100644 --- a/atomics/T1216/T1216.yaml +++ b/atomics/T1216/T1216.yaml @@ -14,7 +14,7 @@ atomic_tests: remote_payload: description: A remote payload to execute using PubPrn.vbs. type: Url - default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/payloads/T1216.sct + default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/src/T1216.sct executor: name: command_prompt @@ -62,4 +62,4 @@ atomic_tests: set comspec=#{command_to_execute} cscript manage-bde.wsf cleanup_command: | # you can remove the cleanup_command section if there are no cleanup commands - set comspec=C:\Windows\System32\cmd.exe \ No newline at end of file + set comspec=C:\Windows\System32\cmd.exe diff --git a/atomics/T1216/payloads/T1216.sct b/atomics/T1216/src/T1216.sct similarity index 98% rename from atomics/T1216/payloads/T1216.sct rename to atomics/T1216/src/T1216.sct index b08f92ef..bc1e4c5c 100644 --- a/atomics/T1216/payloads/T1216.sct +++ b/atomics/T1216/src/T1216.sct @@ -20,4 +20,4 @@ ]]> - \ No newline at end of file +