diff --git a/atomics/T1089/T1089.yaml b/atomics/T1089/T1089.yaml index 7d45362b..30f5839e 100644 --- a/atomics/T1089/T1089.yaml +++ b/atomics/T1089/T1089.yaml @@ -145,7 +145,7 @@ atomic_tests: name: command_prompt elevation_required: true prereq_command: | - sc query sysmon + sc query sysmon > nul command: | sysmon -u cleanup_command: |