From 22c65f4acd48bd97c6cc216bf6916879cda75a3e Mon Sep 17 00:00:00 2001
From: MrOrOneEquals1 <dfr1of8@gmail.com>
Date: Fri, 22 Jan 2021 09:30:13 -0700
Subject: [PATCH] Fix to Cleanup Command for T1003.002 Test Number 3 (#1374)

---
 atomics/T1003.002/T1003.002.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/atomics/T1003.002/T1003.002.yaml b/atomics/T1003.002/T1003.002.yaml
index a0ef34d5..45fdcac7 100644
--- a/atomics/T1003.002/T1003.002.yaml
+++ b/atomics/T1003.002/T1003.002.yaml
@@ -78,7 +78,8 @@ atomic_tests:
       esentutl.exe /y /vss #{file_path} /d #{copy_dest}/#{file_name}
     name: command_prompt
     elevation_required: true
-    cleanup_command: del #{copy_dest}\#{file_name} >nul 2>&1
+    cleanup_command: |
+      del #{copy_dest}\#{file_name} >nul 2>&1
     
 - name: PowerDump Registry dump of SAM for hashes and usernames
   auto_generated_guid: 804f28fc-68fc-40da-b5a2-e9d0bce5c193