From db63ab2cedeeba374daf317f543176b37c3a3229 Mon Sep 17 00:00:00 2001
From: frack113 <62423083+frack113@users.noreply.github.com>
Date: Fri, 19 Aug 2022 16:50:32 +0200
Subject: [PATCH] Fix space in key name (#2087)

---
 atomics/T1112/T1112.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/atomics/T1112/T1112.yaml b/atomics/T1112/T1112.yaml
index c79367f9..ad086c37 100644
--- a/atomics/T1112/T1112.yaml
+++ b/atomics/T1112/T1112.yaml
@@ -584,9 +584,9 @@ atomic_tests:
   - windows
   executor:
     command: |
-      reg add HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration /v Notification_Suppress /t REG_DWORD /d 1 /f
+      reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration" /v Notification_Suppress /t REG_DWORD /d 1 /f
     cleanup_command: |
-      reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration /v Notification_Suppress /f >nul 2>&1
+      reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration" /v Notification_Suppress /f >nul 2>&1
     name: command_prompt
     elevation_required: true
 - name: Allow RDP Remote Assistance Feature
@@ -599,9 +599,9 @@ atomic_tests:
   - windows
   executor:
     command: |
-      reg add HKLM\System\CurrentControlSet\Control\Terminal Server /v fAllowToGetHelp /t REG_DWORD /d 1 /f
+      reg add "HKLM\System\CurrentControlSet\Control\Terminal Server" /v fAllowToGetHelp /t REG_DWORD /d 1 /f
     cleanup_command: |
-      reg delete HKLM\System\CurrentControlSet\Control\Terminal Server /v fAllowToGetHelp /f >nul 2>&1
+      reg delete "HKLM\System\CurrentControlSet\Control\Terminal Server" /v fAllowToGetHelp /f >nul 2>&1
     name: command_prompt
     elevation_required: true
 - name: NetWire RAT Registry Key Creation