diff --git a/atomics/T1056.001/T1056.001.yaml b/atomics/T1056.001/T1056.001.yaml index 595f20bc..6f8fd663 100644 --- a/atomics/T1056.001/T1056.001.yaml +++ b/atomics/T1056.001/T1056.001.yaml @@ -174,7 +174,8 @@ atomic_tests: - name: MacOS Swift Keylogger description: | Utilizes a swift script to log keys to sout. It runs for 5 seconds then dumps the output to standard. Input Monitoring is required. - Input Monitoring can be enabled in System Preferences > Security & Privacy > Privacy > Input Monitoring + Input Monitoring can be enabled in System Preferences > Security & Privacy > Privacy > Input Monitoring. + Referece: https://cedowens.medium.com/taking-esf-for-a-nother-spin-6e1e6acd1b74 supported_platforms: - macos input_arguments: