From f9cdc8a852293a774aef213b3a26658aca5d95bd Mon Sep 17 00:00:00 2001 From: Kyaw-Pyiyt-Htet-Mikoyan <58761670+Mikoyan-Dee@users.noreply.github.com> Date: Sun, 4 Feb 2024 21:51:31 +0630 Subject: [PATCH] Update T1040.yaml --- atomics/T1040/T1040.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1040/T1040.yaml b/atomics/T1040/T1040.yaml index 1e18cdacbc..c359be169e 100644 --- a/atomics/T1040/T1040.yaml +++ b/atomics/T1040/T1040.yaml @@ -456,5 +456,5 @@ atomic_tests: Remove-NetEventSession -Name Capture007 cleanup_command: |- del $ENV:Temp\sniff.etl - name: command_prompt + name: powershell elevation_required: true