diff --git a/atomics/T1040/T1040.yaml b/atomics/T1040/T1040.yaml
index a08b1d63..076e21ae 100644
--- a/atomics/T1040/T1040.yaml
+++ b/atomics/T1040/T1040.yaml
@@ -52,7 +52,7 @@ atomic_tests:
     name: command_prompt
     elevation_required: true
     command: |
-      c:\Program Files\Wireshark\tshark.exe -i #{interface} -c 5
+      "c:\Program Files\Wireshark\tshark.exe" -i #{interface} -c 5
       c:\windump.exe
 
 - name: Packet Capture PowerShell
@@ -70,5 +70,5 @@ atomic_tests:
     name: powershell
     elevation_required: true
     command: |
-      c:\Program Files\Wireshark\tshark.exe -i #{interface} -c 5
-      c:\windump.exe
+      & "c:\Program Files\Wireshark\tshark.exe" -i #{interface} -c 5
+      & c:\windump.exe