From 1bfc4dc6e366129cf251cc79a285d74ba24f4831 Mon Sep 17 00:00:00 2001
From: Brendan Malone <46428809+RoundBunny@users.noreply.github.com>
Date: Thu, 9 Jun 2022 09:48:27 -0500
Subject: [PATCH] Updated descriptions

---
 atomics/T1056.001/T1056.001.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/atomics/T1056.001/T1056.001.yaml b/atomics/T1056.001/T1056.001.yaml
index 96697d89..122209d6 100644
--- a/atomics/T1056.001/T1056.001.yaml
+++ b/atomics/T1056.001/T1056.001.yaml
@@ -173,7 +173,8 @@ atomic_tests:
       systemctl restart auditd
 - name: MacOS Swift Keylogger
   description: |
-    Utilizes a swift script to log keys to sout
+    Utilizes a swift script to log keys to sout. It runs for 5 seconds then dumps the output to standard. Input Monitoring is required.
+    Input Monitoring can be enabled in System Preferences > Security & Privacy > Privacy > Input Monitoring
   supported_platforms:
     - macos
   input_arguments:
@@ -184,7 +185,7 @@ atomic_tests:
   dependency_executor_name: bash
   dependencies:
     - description: |
-        swift script must exist at #{swift_src}
+        swift script must exist at #{swift_src}, and the terminal must have input monitoring permissions.
       prereq_command: |
         if [ -f #{swift_src} ]; then chmod +x #{swift_src}; else exit 1; fi
       get_prereq_command: |