diff --git a/atomics/T1087/T1087.md b/atomics/T1087/T1087.md index 438beecf..e1bd20f9 100644 --- a/atomics/T1087/T1087.md +++ b/atomics/T1087/T1087.md @@ -165,7 +165,7 @@ username=$(echo $HOME | awk -F'/' '{print $3}') && lsof -u $username ## Atomic Test #5 - Show if a user account has ever logged in remotely Show if a user account has ever logged in remotely -**Supported Platforms:** Linux, macOS +**Supported Platforms:** Linux diff --git a/atomics/T1087/T1087.yaml b/atomics/T1087/T1087.yaml index 3d652796..a33792d2 100644 --- a/atomics/T1087/T1087.yaml +++ b/atomics/T1087/T1087.yaml @@ -67,7 +67,6 @@ atomic_tests: Show if a user account has ever logged in remotely supported_platforms: - linux - - macos input_arguments: output_file: description: Path where captured results will be placed