From a4123e5e2fc5e76dff1e0167b394a7e819f8b154 Mon Sep 17 00:00:00 2001
From: Mr B0b <6248411+Mr-B0b@users.noreply.github.com>
Date: Mon, 30 Dec 2019 16:04:37 +0100
Subject: [PATCH] Fix test 8 and 10 output folder for T1003 that performs
 Credential Dumping (#755)

---
 atomics/T1003/T1003.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/atomics/T1003/T1003.yaml b/atomics/T1003/T1003.yaml
index 04009d3c..0b5e9b1f 100644
--- a/atomics/T1003/T1003.yaml
+++ b/atomics/T1003/T1003.yaml
@@ -136,7 +136,7 @@ atomic_tests:
     output_folder:
       description: Path where resulting dump should be placed
       type: Path
-      default: C:\Atomic_Red_Team
+      default: C:\Windows\Temp
   executor:
     name: command_prompt
     elevation_required: true
@@ -176,7 +176,7 @@ atomic_tests:
     extract_path:
       description: Path for extracted NTDS.dit
       type: Path
-      default: C:\Extract
+      default: C:\Windows\Temp
   executor:
     name: command_prompt
     elevation_required: true