Update T1014.md because of typo at Test number 3 (yaml corrected) (#2189)
ld.so.preload instead of ls.so.preload Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
This commit is contained in:
@@ -89,7 +89,7 @@ atomic_tests:
|
||||
- name: dynamic-linker based rootkit (libprocesshider)
|
||||
auto_generated_guid: 1338bf0c-fd0c-48c0-9e65-329f18e2c0d3
|
||||
description: |
|
||||
Uses libprocesshider to simulate rootkit behavior by hiding a specific process name via ls.so.preload (see also T1574.006).
|
||||
Uses libprocesshider to simulate rootkit behavior by hiding a specific process name via ld.so.preload (see also T1574.006).
|
||||
supported_platforms:
|
||||
- linux
|
||||
input_arguments:
|
||||
|
||||
Reference in New Issue
Block a user