diff --git a/atomics/T1055.001/T1055.001.yaml b/atomics/T1055.001/T1055.001.yaml index d04863bb..e8e6a3fc 100644 --- a/atomics/T1055.001/T1055.001.yaml +++ b/atomics/T1055.001/T1055.001.yaml @@ -32,5 +32,6 @@ atomic_tests: command: | $mypid = #{process_id} mavinject $mypid /INJECTRUNNING #{dll_payload} + Stop-Process -processname notepad name: powershell elevation_required: true