diff --git a/atomics/T1070.003/T1070.003.yaml b/atomics/T1070.003/T1070.003.yaml index 4b0ce612..773bbfc0 100644 --- a/atomics/T1070.003/T1070.003.yaml +++ b/atomics/T1070.003/T1070.003.yaml @@ -81,4 +81,15 @@ atomic_tests: echo 'set +o history' >> ~/.bashrc . ~/.bashrc history -c - name: sh \ No newline at end of file + name: sh +- name: Use Space Before Command to Avoid Logging to History + description: | + Using a space before a command causes the command to not be logged in the Bash History file + supported_platforms: + - linux + - macos + executor: + command: | + hostname + whoami + name: sh