diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml index 1a96a600..d07d5b36 100644 --- a/atomics/Indexes/index.yaml +++ b/atomics/Indexes/index.yaml @@ -4751,8 +4751,8 @@ defense-evasion: - name: Truncate system log files via truncate utility auto_generated_guid: 6290f8a8-8ee9-4661-b9cf-390031bf6973 description: 'This test truncates the system log files using the truncate utility - with (-s 0 or --size=0) parameter which sets file size to zero, thus emptying - the file content + with (-s 0) parameter which sets file size to zero, thus emptying the file + content ' supported_platforms: @@ -4774,8 +4774,9 @@ defense-evasion: ' executor: - command: "sudo truncate -s 0 #{system_log_path} #size parameter shorthand\nsudo - truncate --size=0 #{system_log_path} #size parameter \n" + command: 'sudo truncate -s 0 #{system_log_path} #size parameter shorthand + + ' name: sh elevation_required: true - name: Truncate system log files via truncate utility (freebsd) diff --git a/atomics/Indexes/macos-index.yaml b/atomics/Indexes/macos-index.yaml index 3b0e7f58..1b2d882c 100644 --- a/atomics/Indexes/macos-index.yaml +++ b/atomics/Indexes/macos-index.yaml @@ -2762,8 +2762,8 @@ defense-evasion: - name: Truncate system log files via truncate utility auto_generated_guid: 6290f8a8-8ee9-4661-b9cf-390031bf6973 description: 'This test truncates the system log files using the truncate utility - with (-s 0 or --size=0) parameter which sets file size to zero, thus emptying - the file content + with (-s 0) parameter which sets file size to zero, thus emptying the file + content ' supported_platforms: @@ -2785,8 +2785,9 @@ defense-evasion: ' executor: - command: "sudo truncate -s 0 #{system_log_path} #size parameter shorthand\nsudo - truncate --size=0 #{system_log_path} #size parameter \n" + command: 'sudo truncate -s 0 #{system_log_path} #size parameter shorthand + + ' name: sh elevation_required: true - name: Delete log files via cat utility by appending /dev/null or /dev/zero diff --git a/atomics/T1070.002/T1070.002.md b/atomics/T1070.002/T1070.002.md index 64349a41..5817743f 100644 --- a/atomics/T1070.002/T1070.002.md +++ b/atomics/T1070.002/T1070.002.md @@ -163,7 +163,7 @@ sudo log erase --ttl #Deletes only time-to-live log content
## Atomic Test #4 - Truncate system log files via truncate utility -This test truncates the system log files using the truncate utility with (-s 0 or --size=0) parameter which sets file size to zero, thus emptying the file content +This test truncates the system log files using the truncate utility with (-s 0) parameter which sets file size to zero, thus emptying the file content **Supported Platforms:** macOS @@ -185,7 +185,6 @@ This test truncates the system log files using the truncate utility with (-s 0 o ```sh sudo truncate -s 0 #{system_log_path} #size parameter shorthand -sudo truncate --size=0 #{system_log_path} #size parameter ```