diff --git a/atomics/T1040/T1040.yaml b/atomics/T1040/T1040.yaml
index 1e18cdacbc..c359be169e 100644
--- a/atomics/T1040/T1040.yaml
+++ b/atomics/T1040/T1040.yaml
@@ -456,5 +456,5 @@ atomic_tests:
       Remove-NetEventSession -Name Capture007
     cleanup_command: |-
       del $ENV:Temp\sniff.etl
-    name: command_prompt
+    name: powershell
     elevation_required: true