From 3f7fa3bfe8fc8f5b02ff15ec8e355506d81a8332 Mon Sep 17 00:00:00 2001 From: Carrie Roberts Date: Tue, 3 Oct 2023 11:35:32 -0600 Subject: [PATCH] Update T1027.yaml --- atomics/T1027/T1027.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1027/T1027.yaml b/atomics/T1027/T1027.yaml index 5769583354..2da59b4c5b 100644 --- a/atomics/T1027/T1027.yaml +++ b/atomics/T1027/T1027.yaml @@ -241,7 +241,7 @@ atomic_tests: Expand-Archive -path "PathToAtomicsFolder\..\ExternalPayloads\T1027js.zip" -DestinationPath "PathToAtomicsFolder\..\ExternalPayloads\temp_T1027js.zip\" -Force executor: command: | - "%temp%\temp_T1027js.zip\T1027js.js" + "PathToAtomicsFolder\..\ExternalPayloads\temp_T1027js.zip\T1027js.js" cleanup_command: | taskkill /f /im calculator.exe >nul 2>nul name: command_prompt