diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml
index ed3285d3..5793388b 100644
--- a/atomics/Indexes/index.yaml
+++ b/atomics/Indexes/index.yaml
@@ -40080,6 +40080,9 @@ execution:
           sc.exe create #{service_name} binPath= "#{executable_command}"
           sc.exe start #{service_name}
           sc.exe delete #{service_name}
+        cleanup_command: 'del C:\art-marker.txt >nul 2>&1
+
+'
         name: command_prompt
         elevation_required: true
     - name: Use PsExec to execute a command on a remote host
diff --git a/atomics/T1569.002/T1569.002.md b/atomics/T1569.002/T1569.002.md
index e9bd772e..4ac4cb86 100644
--- a/atomics/T1569.002/T1569.002.md
+++ b/atomics/T1569.002/T1569.002.md
@@ -41,6 +41,10 @@ sc.exe start #{service_name}
 sc.exe delete #{service_name}
 ```
 
+#### Cleanup Commands:
+```cmd
+del C:\art-marker.txt >nul 2>&1
+```