T1055.001 improvement (#1902)

Co-authored-by: McDaniel <jmcdan@NTI.local> Co-authored-by: Jose Enrique Hernandez <josehelps@gmail.com> Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-04-27 20:15:57 -05:00
parent 724cb3f50d
commit 4e7044e077
1 changed files with 1 additions and 0 deletions
@@ -32,5 +32,6 @@ atomic_tests:
    command: |
      $mypid = #{process_id}
      mavinject $mypid /INJECTRUNNING #{dll_payload}
+      Stop-Process -processname notepad
    name: powershell
    elevation_required: true