From e929fa518f860637f5f8cff0bdbefe312cef77fa Mon Sep 17 00:00:00 2001 From: frack113 <62423083+frack113@users.noreply.github.com> Date: Mon, 21 Mar 2022 23:56:59 +0100 Subject: [PATCH] Fix test 10 (#1823) Co-authored-by: Carrie Roberts --- atomics/T1112/T1112.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/atomics/T1112/T1112.yaml b/atomics/T1112/T1112.yaml index 25487998..b64f6baf 100644 --- a/atomics/T1112/T1112.yaml +++ b/atomics/T1112/T1112.yaml @@ -179,10 +179,10 @@ atomic_tests: - windows executor: command: | - reg add "HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System" /v "DisableCMD" /t REG_DWORD /d "1" /f + New-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Windows\System" -Name DisableCMD -Value 1 cleanup_command: | - reg delete "HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System" /v "DisableCMD" /f >nul 2>&1 - name: command_prompt + Remove-ItemProperty -Path "HKCU:\Software\Policies\Microsoft\Windows\System" -Name DisableCMD -ErrorAction Ignore + name: powershell elevation_required: true - name: Disable Windows Task Manager application auto_generated_guid: af254e70-dd0e-4de6-9afe-a994d9ea8b62