From f62f72c9d879d19df2cb12339a60079faab2cd8c Mon Sep 17 00:00:00 2001
From: CircleCI Atomic Red Team doc generator <email>
Date: Thu, 8 Apr 2021 13:12:07 +0000
Subject: [PATCH] Generate docs from job=generate_and_commit_guids_and_docs
 branch=master [skip ci]

---
 atomics/Indexes/index.yaml | 1 +
 atomics/T1555/T1555.md     | 1 +
 2 files changed, 2 insertions(+)

diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml
index 5a7ef7bf..7844d757 100644
--- a/atomics/Indexes/index.yaml
+++ b/atomics/Indexes/index.yaml
@@ -18820,6 +18820,7 @@ credential-access:
         prereq_command: |
           try {
             New-Object -COMObject "word.Application" | Out-Null
+            $process = "winword"
             Stop-Process -Name $process
             exit 0
           } catch { exit 1 }
diff --git a/atomics/T1555/T1555.md b/atomics/T1555/T1555.md
index b8edae40..c08e2e0b 100644
--- a/atomics/T1555/T1555.md
+++ b/atomics/T1555/T1555.md
@@ -40,6 +40,7 @@ Remove-Item "$env:TEMP\windows-credentials.txt" -ErrorAction Ignore
 ```powershell
 try {
   New-Object -COMObject "word.Application" | Out-Null
+  $process = "winword"
   Stop-Process -Name $process
   exit 0
 } catch { exit 1 }