redcanaryco / invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.
MIT License
818 stars 194 forks source link

tmp is default location for exec log #8

Closed clr2of8 closed 4 years ago

clr2of8 commented 4 years ago

execution log used to be written to the "current directory" which was inconsistent and problematic if the user did not have write access to the current directory. This PR sets the default exec log location to the temp directory. (/tmp on Linux and Mac or $env:Temp on Windows). Of course, the -ExecutionLogPath parameter can still be specified to set a custom path/filename for the exec log.

Tested on: Ubuntu 18.04 Windows 10 Powershell Version 5