From 685c735ebca8df58e348ddebfaff9fa559d12beb Mon Sep 17 00:00:00 2001 From: Tyler Bennett Date: Mon, 23 Mar 2020 10:11:27 -0500 Subject: [PATCH] lastlog is not supported in OSX, at least not in 10.14.6 (#902) Co-authored-by: Carrie Roberts --- atomics/T1087/T1087.md | 2 +- atomics/T1087/T1087.yaml | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/atomics/T1087/T1087.md b/atomics/T1087/T1087.md index 438beecf..e1bd20f9 100644 --- a/atomics/T1087/T1087.md +++ b/atomics/T1087/T1087.md @@ -165,7 +165,7 @@ username=$(echo $HOME | awk -F'/' '{print $3}') && lsof -u $username ## Atomic Test #5 - Show if a user account has ever logged in remotely Show if a user account has ever logged in remotely -**Supported Platforms:** Linux, macOS +**Supported Platforms:** Linux diff --git a/atomics/T1087/T1087.yaml b/atomics/T1087/T1087.yaml index 3d652796..a33792d2 100644 --- a/atomics/T1087/T1087.yaml +++ b/atomics/T1087/T1087.yaml @@ -67,7 +67,6 @@ atomic_tests: Show if a user account has ever logged in remotely supported_platforms: - linux - - macos input_arguments: output_file: description: Path where captured results will be placed