From d667fffea2af61eb0100195629997bf3bf199ba6 Mon Sep 17 00:00:00 2001 From: Carrie Roberts Date: Tue, 3 Oct 2023 11:38:37 -0600 Subject: [PATCH] correct url (#2552) * correct url * Update T1027.yaml --- atomics/T1027/T1027.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/atomics/T1027/T1027.yaml b/atomics/T1027/T1027.yaml index 2205b852ca..2da59b4c5b 100644 --- a/atomics/T1027/T1027.yaml +++ b/atomics/T1027/T1027.yaml @@ -227,7 +227,7 @@ atomic_tests: url_path: description: url to download JScript file type: url - default: https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1027/bin/T1027js.zip + default: https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1027/bin/t1027js.zip dependency_executor_name: powershell dependencies: - description: | @@ -241,7 +241,7 @@ atomic_tests: Expand-Archive -path "PathToAtomicsFolder\..\ExternalPayloads\T1027js.zip" -DestinationPath "PathToAtomicsFolder\..\ExternalPayloads\temp_T1027js.zip\" -Force executor: command: | - "%temp%\temp_T1027js.zip\T1027js.js" + "PathToAtomicsFolder\..\ExternalPayloads\temp_T1027js.zip\T1027js.js" cleanup_command: | taskkill /f /im calculator.exe >nul 2>nul name: command_prompt