diff --git a/atomics/T1564.002/T1564.002.yaml b/atomics/T1564.002/T1564.002.yaml index de822dc9..c7302ca7 100644 --- a/atomics/T1564.002/T1564.002.yaml +++ b/atomics/T1564.002/T1564.002.yaml @@ -16,6 +16,6 @@ atomic_tests: command: | sudo dscl . -create /Users/#{user_name} UniqueID 333 cleanup_command: | - sudo dscl . -delete /Users/#{username} + sudo dscl . -delete /Users/#{user_name} elevation_required: true name: sh