diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 890575b0..ff22d3b5 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -27428,6 +27428,7 @@ defense-evasion: - description: T1027.exe must exist on disk at specified location prereq_command: 'if (Test-Path #{exe_payload}) {exit 0} else {exit 1}' get_prereq_command: |- + [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 Invoke-WebRequest "#{url_path}" -OutFile "$env:temp\T1027.zip" Expand-Archive -path "$env:temp\T1027.zip" -DestinationPath "$env:temp\temp_T1027.zip\" -Force executor: diff --git a/atomics/T1027/T1027.md b/atomics/T1027/T1027.md index 038c2f2c..030f524b 100644 --- a/atomics/T1027/T1027.md +++ b/atomics/T1027/T1027.md @@ -167,6 +167,7 @@ if (Test-Path #{exe_payload}) {exit 0} else {exit 1} ``` ##### Get Prereq Commands: ```powershell +[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 Invoke-WebRequest "#{url_path}" -OutFile "$env:temp\T1027.zip" Expand-Archive -path "$env:temp\T1027.zip" -DestinationPath "$env:temp\temp_T1027.zip\" -Force ```