diff --git a/atomics/T1136.003/T1136.003.yaml b/atomics/T1136.003/T1136.003.yaml index 1f0225ab..068e9dd8 100644 --- a/atomics/T1136.003/T1136.003.yaml +++ b/atomics/T1136.003/T1136.003.yaml @@ -100,5 +100,5 @@ atomic_tests: $password = "#{password}" az ad user create --display-name $username --password $password --user-principal-name $userprincipalname az ad user list --filter "displayname eq 'atomicredteam'" - cleanup_command: az ad user delete --id #{userprincipalname} + cleanup_command: az ad user delete --id "#{userprincipalname}" name: powershell