diff --git a/atomics/T1003/T1003.md b/atomics/T1003/T1003.md index 6eb29392..9b807341 100644 --- a/atomics/T1003/T1003.md +++ b/atomics/T1003/T1003.md @@ -327,7 +327,7 @@ subsequent domain controllers without the need of network-based replication. #### Run it with `command_prompt`! Elevation Required (e.g. root or admin) ``` -ntdsutil “ac i ntds” “ifm” “create full #{output_folder} q q +ntdsutil "ac i ntds" "ifm" "create full #{output_folder}" q q ``` diff --git a/atomics/index.yaml b/atomics/index.yaml index 2fb3ccab..c80509bc 100644 --- a/atomics/index.yaml +++ b/atomics/index.yaml @@ -14943,7 +14943,7 @@ credential-access: executor: name: command_prompt elevation_required: true - command: 'ntdsutil “ac i ntds” “ifm” “create full #{output_folder} q q + command: 'ntdsutil "ac i ntds" "ifm" "create full #{output_folder}" q q ' - name: Create Volume Shadow Copy with NTDS.dit