redcanaryco/invoke-atomicredteam

T1055-2 passed prereqs, failed test.

dsq717 opened this issue · 0 comments

What did you do?

Installed ART via Invoke-AtomicRedTeam using all default settings and default folder locations
Ran all tests within T1055 set using default parameters
All tests passed except for T1055-2
Attempted to troubleshoot through T1055 YAML file; no indication of syntax errors.
Verified all PreReq .exe files (PsExec.exe and mimikatz.exe) were in their expected folder locations

image

What did you expect to happen?

The test to run without failing

What happened instead?

The filename, directory name, or volume label syntax is incorrect.
Exit code: 1

Your Environment

Windows 11 Home 23H2 running in VirtualBox
Ran as Administrator
Using Invoke-AtomicTest