Update T1040.yaml

redcanaryco · Feb 4, 2024 · f9cdc8a · f9cdc8a
1 parent 4afca3b
commit f9cdc8a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/atomics/T1040/T1040.yaml b/atomics/T1040/T1040.yaml
@@ -456,5 +456,5 @@ atomic_tests:
       Remove-NetEventSession -Name Capture007
     cleanup_command: |-
       del $ENV:Temp\sniff.etl
-    name: command_prompt
+    name: powershell
     elevation_required: true