From eee2765c9daf0451a0b959f50d1b819084ced680 Mon Sep 17 00:00:00 2001 From: Scoubi Date: Fri, 17 Jul 2020 15:48:17 -0400 Subject: [PATCH] Update T1546.010.yaml (#1140) Add a line to include/force TLS1.2 in order for the prereq function to work on win2k16 All the credit to clr2of8 for sending me the string --- atomics/T1546.010/T1546.010.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/atomics/T1546.010/T1546.010.yaml b/atomics/T1546.010/T1546.010.yaml index 5ad17c68..acaa9658 100644 --- a/atomics/T1546.010/T1546.010.yaml +++ b/atomics/T1546.010/T1546.010.yaml @@ -26,6 +26,7 @@ atomic_tests: prereq_command: | if ((Test-Path #{registry_file}) -and (Test-Path #{registry_cleanup_file})) {exit 0} else {exit 1} get_prereq_command: | + [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 New-Item -Type Directory (split-path #{registry_file}) -ErrorAction ignore | Out-Null Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1546.010/src/T1546.010.reg" -OutFile "#{registry_file}" Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1546.010/src/T1546.010-cleanup.reg" -OutFile "#{registry_cleanup_file}" @@ -43,4 +44,4 @@ atomic_tests: cleanup_command: | reg.exe import #{registry_cleanup_file} >nul 2>&1 name: command_prompt - elevation_required: true \ No newline at end of file + elevation_required: true