Skip to content

Fix T1123: Replace deprecated audio module with AudioDeviceCmdlets #3164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

Always-in-the-Cage
Copy link
Contributor

Description

This PR updates Atomic Test T1123-1 (Audio Capture) to use the actively maintained AudioDeviceCmdlets module instead of the deprecated WindowsAudioDevice-Powershell-Cmdlet. Changes include:

  • Replaced obsolete command with working PowerShell implementation
  • Added explicit dependency check for the required module
  • Updated documentation links
  • Improved error handling for systems without microphones

Testing

Verified on:

  • Windows 10 (21H2)
  • Windows 11 (22H2)

Test commands:

Invoke-AtomicTest T1123-1 -GetPrereqs
Invoke-AtomicTest T1123-1

clr2of8
clr2of8 previously approved these changes Aug 21, 2025
Copy link
Collaborator

@clr2of8 clr2of8 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome! Thank you for your first-time contribution. Keep it up! Don't forget to claim your free Atomic Red Team t-shirt

@clr2of8 clr2of8 merged commit 095f02e into redcanaryco:master Aug 21, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants