diff --git a/atomics/T1168/T1168.md b/atomics/T1168/T1168.md index 0ad893ee..0010420e 100644 --- a/atomics/T1168/T1168.md +++ b/atomics/T1168/T1168.md @@ -73,7 +73,6 @@ This test adds persistence via a plist to execute via the macOS Event Monitor Da #### Run it with these steps! 1. Place this file in /etc/emond.d/rules/atomicredteam.plist -``` @@ -106,7 +105,6 @@ This test adds persistence via a plist to execute via the macOS Event Monitor Da -``` 2. Place an empty file in /private/var/db/emondClients/