diff --git a/atomics/T1007/T1007.yaml b/atomics/T1007/T1007.yaml index ace23084..a2c2bfcf 100644 --- a/atomics/T1007/T1007.yaml +++ b/atomics/T1007/T1007.yaml @@ -22,6 +22,6 @@ atomic_tests: tasklist.exe sc query sc query state= all - sc start ${servicename} - sc stop ${servicename} - wmic service where (displayname like "${servicename}") get name + sc start #{service_name} + sc stop #{service_name} + wmic service where (displayname like "#{service_name}") get name