From 8666118b4b1dd76af05ad274a4089d110909d6be Mon Sep 17 00:00:00 2001 From: Carrie Roberts Date: Sat, 7 Oct 2023 13:09:32 -0600 Subject: [PATCH] no prompt for confirmation (#2553) Co-authored-by: Hare Sudhan --- atomics/T1021.001/T1021.001.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1021.001/T1021.001.yaml b/atomics/T1021.001/T1021.001.yaml index 2230720160..cd4a2711e8 100644 --- a/atomics/T1021.001/T1021.001.yaml +++ b/atomics/T1021.001/T1021.001.yaml @@ -90,7 +90,7 @@ atomic_tests: cleanup_command: | reg add "HKLM\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber /t REG_DWORD /d #{OLD_Remote_Port} /f >nul 2>&1 netsh advfirewall firewall delete rule name="RDPPORTLatest-TCP-In" >nul 2>&1 - net stop TermService >nul 2>&1 + net stop TermService /y >nul 2>&1 net start TermService >nul 2>&1 name: command_prompt elevation_required: true