diff --git a/atomics/T1014/T1014.yaml b/atomics/T1014/T1014.yaml index 8f0ba450..a5cd297f 100644 --- a/atomics/T1014/T1014.yaml +++ b/atomics/T1014/T1014.yaml @@ -89,7 +89,7 @@ atomic_tests: - name: dynamic-linker based rootkit (libprocesshider) auto_generated_guid: 1338bf0c-fd0c-48c0-9e65-329f18e2c0d3 description: | - Uses libprocesshider to simulate rootkit behavior by hiding a specific process name via ls.so.preload (see also T1574.006). + Uses libprocesshider to simulate rootkit behavior by hiding a specific process name via ld.so.preload (see also T1574.006). supported_platforms: - linux input_arguments: