diff --git a/atomics/T1033/T1033.yaml b/atomics/T1033/T1033.yaml index fe0d3fcb..0188909f 100644 --- a/atomics/T1033/T1033.yaml +++ b/atomics/T1033/T1033.yaml @@ -103,5 +103,5 @@ atomic_tests: whoami.exe /all >> #{output_path}\$file cleanup_command: | - Remove-Item -Path $env:temp\rad*.tmp -Force + Remove-Item -Path #{output_path}\rad*.tmp -Force name: powershell \ No newline at end of file