Merge branch 'master' into clr2of8-patch-60

redcanaryco · Nov 9, 2023 · 1c376a2 · 1c376a2
2 parents c29adab + 08a8183
commit 1c376a2
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 3 deletions.
diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml
@@ -9692,6 +9692,7 @@ defense-evasion:
           description: Path to ie4uinit.exe
           type: path
           default: c:\windows\system32\ie4uinit.exe
+      dependency_executor_name: powershell
       dependencies:
       - description: 'ieuinit.inf must exist on disk at specified location (#{Path_inf})
 

diff --git a/atomics/Indexes/windows-index.yaml b/atomics/Indexes/windows-index.yaml
@@ -7593,6 +7593,7 @@ defense-evasion:
           description: Path to ie4uinit.exe
           type: path
           default: c:\windows\system32\ie4uinit.exe
+      dependency_executor_name: powershell
       dependencies:
       - description: 'ieuinit.inf must exist on disk at specified location (#{Path_inf})
 

diff --git a/atomics/T1218/T1218.md b/atomics/T1218/T1218.md
@@ -584,14 +584,14 @@ del %TEMP%\ieuinit.inf >nul 2>&1
 
 
 
-#### Dependencies:  Run with `command_prompt`!
+#### Dependencies:  Run with `powershell`!
 ##### Description: ieuinit.inf must exist on disk at specified location (#{Path_inf})
 ##### Check Prereq Commands:
-```cmd
+```powershell
 if (Test-Path "#{Path_inf}") {exit 0} else {exit 1}
 ```
 ##### Get Prereq Commands:
-```cmd
+```powershell
 New-Item -Type Directory (split-path "#{Path_inf}") -ErrorAction ignore | Out-Null
 Invoke-WebRequest "https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1218/src/ieuinit.inf" -OutFile "#{Path_inf}"
 ```

diff --git a/atomics/T1218/T1218.yaml b/atomics/T1218/T1218.yaml
@@ -313,6 +313,7 @@ atomic_tests:
       description: Path to ie4uinit.exe
       type: path
       default: c:\windows\system32\ie4uinit.exe
+  dependency_executor_name: powershell
   dependencies:
   - description: |
       ieuinit.inf must exist on disk at specified location (#{Path_inf})