diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index b6d0ba9a..f910c7a2 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -28770,20 +28770,9 @@ defense-evasion: type: string default: "%temp%\\T1564.004_has_ads_cmd.txt" ads_filename: - description: Name of ADS file. + description: Name of ADS. type: string default: adstest.txt - dependency_executor_name: command_prompt - dependencies: - - description: 'The file must exist on disk at specified location (#{file_name}) - -' - prereq_command: 'IF EXIST #{file_name} ( EXIT 0 ) ELSE ( EXIT 1 ) - -' - get_prereq_command: 'echo normal_text >> #{file_name} >nul 2>&1 - -' executor: command: | echo cmd /c echo "Shell code execution."> #{file_name}:#{ads_filename} diff --git a/atomics/T1564.004/T1564.004.md b/atomics/T1564.004/T1564.004.md index 20d9ef54..c350a0b6 100644 --- a/atomics/T1564.004/T1564.004.md +++ b/atomics/T1564.004/T1564.004.md @@ -111,7 +111,7 @@ folder to view that the alternate data stream exists. To view the data in the al | Name | Description | Type | Default Value | |------|-------------|------|---------------| | file_name | File name of file to create ADS on. | string | %temp%\T1564.004_has_ads_cmd.txt| -| ads_filename | Name of ADS file. | string | adstest.txt| +| ads_filename | Name of ADS. | string | adstest.txt| #### Attack Commands: Run with `command_prompt`! @@ -129,18 +129,6 @@ del #{file_name} >nul 2>&1 -#### Dependencies: Run with `command_prompt`! -##### Description: The file must exist on disk at specified location (#{file_name}) -##### Check Prereq Commands: -```cmd -IF EXIST #{file_name} ( EXIT 0 ) ELSE ( EXIT 1 ) -``` -##### Get Prereq Commands: -```cmd -echo normal_text >> #{file_name} >nul 2>&1 -``` - -