From ab620dbbf3891cad2565963faf1da82e8cdec282 Mon Sep 17 00:00:00 2001 From: Carrie Roberts Date: Tue, 26 Apr 2022 10:44:23 -0600 Subject: [PATCH] use raw url so you get a functional script --- atomics/T1114.001/T1114.001.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1114.001/T1114.001.yaml b/atomics/T1114.001/T1114.001.yaml index c6149b8d..087e4d82 100644 --- a/atomics/T1114.001/T1114.001.yaml +++ b/atomics/T1114.001/T1114.001.yaml @@ -26,7 +26,7 @@ atomic_tests: prereq_command: | if (Test-Path #{file_path}\Get-Inbox.ps1) {exit 0} else {exit 1} get_prereq_command: | - Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1114.001/src/Get-Inbox.ps1" -OutFile "#{file_path}\Get-Inbox.ps1" + Invoke-WebRequest "https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1114.001/src/Get-Inbox.ps1" -OutFile "#{file_path}\Get-Inbox.ps1" executor: command: | powershell -executionpolicy bypass -command #{file_path}\Get-Inbox.ps1 -file #{output_file}