From fe4485d818afd7bde97c262ecd80b36708ca7543 Mon Sep 17 00:00:00 2001
From: Carrie Roberts <clr2of8@gmail.com>
Date: Fri, 30 Jul 2021 16:57:50 -0600
Subject: [PATCH] add domain joined check (#1577)

---
 atomics/T1558.003/T1558.003.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/atomics/T1558.003/T1558.003.yaml b/atomics/T1558.003/T1558.003.yaml
index e941e8ec..58abe080 100644
--- a/atomics/T1558.003/T1558.003.yaml
+++ b/atomics/T1558.003/T1558.003.yaml
@@ -12,6 +12,13 @@ atomic_tests:
     If the testing domain doesn't have any service principal name configured, there is no output
   supported_platforms:
   - windows
+  dependencies:
+  - description: |
+      Computer must be domain joined
+    prereq_command: |
+      if((Get-CIMInstance -Class Win32_ComputerSystem).PartOfDomain) {exit 0} else {exit 1}
+    get_prereq_command: |
+      Write-Host Joining this computer to a domain must be done manually
   executor:
     command: |
       [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12