From e8d26acbc7cf745d97271b70fe600cebdf88c591 Mon Sep 17 00:00:00 2001 From: Carrie Roberts Date: Tue, 10 Oct 2023 10:04:16 -0600 Subject: [PATCH] use cmd.exe syntax for temp dir (#2558) Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com> --- atomics/T1059.007/T1059.007.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/atomics/T1059.007/T1059.007.yaml b/atomics/T1059.007/T1059.007.yaml index 10191fcd7a..3f83c8e864 100644 --- a/atomics/T1059.007/T1059.007.yaml +++ b/atomics/T1059.007/T1059.007.yaml @@ -21,8 +21,8 @@ atomic_tests: Invoke-WebRequest "https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1059.007/src/sys_info.js" -OutFile "#{jscript}" executor: command: | - cscript "#{jscript}" > $env:TEMP\T1059.007.out.txt - cleanup_command: del $env:TEMP\T1059.007.out.txt >nul 2>&1 + cscript "#{jscript}" > %tmp%\T1059.007.out.txt + cleanup_command: del %tmp%\T1059.007.out.txt >nul 2>&1 name: command_prompt - name: JScript execution to gather local computer information via wscript auto_generated_guid: 0709945e-4fec-4c49-9faf-c3c292a74484