redcanaryco / invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.
MIT License
831 stars 195 forks source link

Switch Atomic Runner to use a Service instead of a Scheduled Task #188

Closed clr2of8 closed 3 months ago

clr2of8 commented 6 months ago

This code switches the atomic runner continuous testing to use a service instead of a scheduled task. The service will be called atomicrunnerservice and it will be installed in the c:\Windows\System32 directory by default. You can specify an alternate directory location for the service install with the -serviceInstallDir parameter.

If instead you would like to continue using the scheduled task instead of the service, specify the -asScheduledTask flag when calling Invoke-SetupAtomicRunner.

The code also includes a change that allows the -anyOS flag to be used with Invoke-AtomicRunner when-showDetails or -showDetailsBrief are used