diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 33f3406f..cecfbe56 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -92314,6 +92314,16 @@ command-and-control: get_prereq_command: 'Invoke-WebRequest -OutFile "$env:UserProfile\Downloads\psiphon3.exe" "https://s3.amazonaws.com/0ubz-2q11-gi9y/psiphon3.exe" + ' + - description: "Batch file containing commands to run must be in src directory + \n" + prereq_command: 'if (Test-Path PathToAtomicsFolder\T1090.003\src\Psiphon.bat) + {exit 0} else {exit 1} + + ' + get_prereq_command: 'Invoke-WebRequest -OutFile "PathToAtomicsFolder\T1090.003\src\Psiphon.bat" + "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1090.003/src/Psiphon.bat" + ' executor: name: powershell diff --git a/atomics/T1090.003/T1090.003.md b/atomics/T1090.003/T1090.003.md index 5d981808..487fcb95 100644 --- a/atomics/T1090.003/T1090.003.md +++ b/atomics/T1090.003/T1090.003.md @@ -72,6 +72,15 @@ if (Test-Path $env:UserProfile\Downloads\psiphon3.exe) {exit 0} else {exit 1} ```powershell Invoke-WebRequest -OutFile "$env:UserProfile\Downloads\psiphon3.exe" "https://s3.amazonaws.com/0ubz-2q11-gi9y/psiphon3.exe" ``` +##### Description: Batch file containing commands to run must be in src directory +##### Check Prereq Commands: +```powershell +if (Test-Path PathToAtomicsFolder\T1090.003\src\Psiphon.bat) {exit 0} else {exit 1} +``` +##### Get Prereq Commands: +```powershell +Invoke-WebRequest -OutFile "PathToAtomicsFolder\T1090.003\src\Psiphon.bat" "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1090.003/src/Psiphon.bat" +```