From 4e7044e077b0397ba0449385dab75a34afff7ef5 Mon Sep 17 00:00:00 2001 From: Jathan-McDaniel <71524400+Jathan-McDaniel@users.noreply.github.com> Date: Wed, 27 Apr 2022 20:15:57 -0500 Subject: [PATCH] T1055.001 improvement (#1902) Co-authored-by: McDaniel Co-authored-by: Jose Enrique Hernandez Co-authored-by: Carrie Roberts --- atomics/T1055.001/T1055.001.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/atomics/T1055.001/T1055.001.yaml b/atomics/T1055.001/T1055.001.yaml index d04863bb..e8e6a3fc 100644 --- a/atomics/T1055.001/T1055.001.yaml +++ b/atomics/T1055.001/T1055.001.yaml @@ -32,5 +32,6 @@ atomic_tests: command: | $mypid = #{process_id} mavinject $mypid /INJECTRUNNING #{dll_payload} + Stop-Process -processname notepad name: powershell elevation_required: true