From f85d4a0d65032769773040f56bab89adbcd8c467 Mon Sep 17 00:00:00 2001 From: Michael Haag <5632822+MHaggis@users.noreply.github.com> Date: Mon, 28 Jun 2021 08:56:57 -0600 Subject: [PATCH] Update T1135.yaml (#1533) Updated and confirmed operational. #1441 Co-authored-by: Carrie Roberts --- atomics/T1135/T1135.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/atomics/T1135/T1135.yaml b/atomics/T1135/T1135.yaml index 7567f6f3..ff02d0ae 100644 --- a/atomics/T1135/T1135.yaml +++ b/atomics/T1135/T1135.yaml @@ -88,6 +88,14 @@ atomic_tests: Enumerate Domain Shares the current user has access. Upon execution, progress info about each share being scanned will be displayed. supported_platforms: - windows + dependency_executor_name: powershell + dependencies: + - description: | + Endpoint must be joined to domain + prereq_command: | + if ((Get-WmiObject -Class Win32_ComputerSystem).PartofDomain) {exit 0} else {exit 1} + get_prereq_command: | + "Join system to domain" executor: command: | [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12