From 1b7cc49d63684a2e231df12966867ea7c38003a7 Mon Sep 17 00:00:00 2001 From: CircleCI Atomic Red Team doc generator Date: Mon, 3 May 2021 22:58:57 +0000 Subject: [PATCH] Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] --- atomics/Indexes/index.yaml | 4 ++++ atomics/T1562.001/T1562.001.md | 6 +++++- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index b820a2d0..ee5f0ce7 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -29695,8 +29695,12 @@ defense-evasion: executor: command: 'setenforce 0 +' + cleanup_command: 'setenforce 1 + ' name: sh + elevation_required: true - name: Stop Crowdstrike Falcon on Linux auto_generated_guid: 828a1278-81cc-4802-96ab-188bf29ca77d description: 'Stop and disable Crowdstrike Falcon on Linux diff --git a/atomics/T1562.001/T1562.001.md b/atomics/T1562.001/T1562.001.md index b70615ae..e43f993f 100644 --- a/atomics/T1562.001/T1562.001.md +++ b/atomics/T1562.001/T1562.001.md @@ -126,13 +126,17 @@ Disables SELinux enforcement -#### Attack Commands: Run with `sh`! +#### Attack Commands: Run with `sh`! Elevation Required (e.g. root or admin) ```sh setenforce 0 ``` +#### Cleanup Commands: +```sh +setenforce 1 +```