diff --git a/atomics/T1548.002/T1548.002.yaml b/atomics/T1548.002/T1548.002.yaml index 994ffdba..dc88ea28 100644 --- a/atomics/T1548.002/T1548.002.yaml +++ b/atomics/T1548.002/T1548.002.yaml @@ -1,5 +1,5 @@ attack_technique: T1548.002 -display_name: 'Abuse Elevation Control Mechanism: Bypass User Access Control' +display_name: 'Abuse Elevation Control Mechanism: Bypass User Account Control' atomic_tests: - name: Bypass UAC using Event Viewer (cmd) auto_generated_guid: 5073adf8-9a50-4bd9-b298-a9bd2ead8af9 @@ -642,4 +642,4 @@ atomic_tests: $Process = Start-Process -FilePath "C:\Windows\System32\WSReset.exe" -WindowStyle Hidden cleanup_command: | Remove-Item #{commandpath} -Recurse -Force - name: powershell \ No newline at end of file + name: powershell