diff --git a/atomics/T1216/T1216.yaml b/atomics/T1216/T1216.yaml
index 466c30d5..855b428b 100644
--- a/atomics/T1216/T1216.yaml
+++ b/atomics/T1216/T1216.yaml
@@ -27,12 +27,12 @@ atomic_tests:
     command_to_execute:
       description: A command to execute.
       type: Path
-      default: C:\Windows\System32\calc.exe
+      default: '%windir%\System32\calc.exe'
   executor:
     command: |
       set comspec=#{command_to_execute}
-      cscript manage-bde.wsf
+      cscript %windir%\System32\manage-bde.wsf
     cleanup_command: |
-      set comspec=C:\Windows\System32\cmd.exe
+      set comspec=%windir%\System32\cmd.exe
     name: command_prompt