From 4474d35ebfec7eaa31823c2f9876dc1d70188196 Mon Sep 17 00:00:00 2001
From: Swelc <shane@swelcher.com>
Date: Thu, 21 Jun 2018 22:56:16 -0500
Subject: [PATCH] Added Windows user/group queries

---
 atomics/T1087/T1087.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/atomics/T1087/T1087.yaml b/atomics/T1087/T1087.yaml
index c21459f2..966e49c7 100644
--- a/atomics/T1087/T1087.yaml
+++ b/atomics/T1087/T1087.yaml
@@ -138,8 +138,8 @@ atomic_tests:
     - windows
   executor:
     name: command_prompt
-  command: |
-    query user
+    command: |
+      query user
 
 - name: Get logged on users PowerShell
   description: |
@@ -148,5 +148,5 @@ atomic_tests:
     - windows
   executor:
     name: powershell
-  command: |
-    query user
+    command: |
+      query user