use cmd.exe syntax for temp dir (#2558)

Co-authored-by: Michael Haag <[email protected]>
redcanaryco · Oct 10, 2023 · e8d26ac · e8d26ac
1 parent 3625d11
commit e8d26ac
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/atomics/T1059.007/T1059.007.yaml b/atomics/T1059.007/T1059.007.yaml
@@ -21,8 +21,8 @@ atomic_tests:
       Invoke-WebRequest "https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1059.007/src/sys_info.js" -OutFile "#{jscript}"
   executor:
     command: |
-      cscript "#{jscript}" > $env:TEMP\T1059.007.out.txt
-    cleanup_command: del $env:TEMP\T1059.007.out.txt >nul 2>&1
+      cscript "#{jscript}" > %tmp%\T1059.007.out.txt
+    cleanup_command: del %tmp%\T1059.007.out.txt >nul 2>&1
     name: command_prompt
 - name: JScript execution to gather local computer information via wscript
   auto_generated_guid: 0709945e-4fec-4c49-9faf-c3c292a74484