From e0f2a7611480be0ea7e30399b6ee718aff98ff43 Mon Sep 17 00:00:00 2001 From: MrOrOneEquals1 Date: Thu, 30 Dec 2021 12:08:06 -0700 Subject: [PATCH] Update T1003.yaml (#1702) * Update T1003.yaml Add -UseBasicParsing to line 41 * Update T1003.yaml Co-authored-by: Carrie Roberts --- atomics/T1003/T1003.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1003/T1003.yaml b/atomics/T1003/T1003.yaml index 0b2a0b93..4a608c1b 100644 --- a/atomics/T1003/T1003.yaml +++ b/atomics/T1003/T1003.yaml @@ -37,7 +37,7 @@ atomic_tests: get_prereq_command: | [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 $parentpath = Split-Path "#{gsecdump_exe}"; $binpath = "$parentpath\gsecdump-v2b5.exe" - IEX(IWR "https://raw.githubusercontent.com/redcanaryco/invoke-atomicredteam/master/Public/Invoke-WebRequestVerifyHash.ps1") + IEX(IWR "https://raw.githubusercontent.com/redcanaryco/invoke-atomicredteam/master/Public/Invoke-WebRequestVerifyHash.ps1" -UseBasicParsing) if(Invoke-WebRequestVerifyHash "#{gsecdump_url}" "$binpath" #{gsecdump_bin_hash}){ Move-Item $binpath "#{gsecdump_exe}" }