From 7b1e347a4d46de4a33730a6c48101cd4b869669e Mon Sep 17 00:00:00 2001 From: b0bbey <96835580+brseil@users.noreply.github.com> Date: Wed, 19 Oct 2022 03:28:00 +0200 Subject: [PATCH] Update T1014.md because of typo at Test number 3 (yaml corrected) (#2189) ld.so.preload instead of ls.so.preload Co-authored-by: Carrie Roberts --- atomics/T1014/T1014.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atomics/T1014/T1014.yaml b/atomics/T1014/T1014.yaml index 8f0ba450..a5cd297f 100644 --- a/atomics/T1014/T1014.yaml +++ b/atomics/T1014/T1014.yaml @@ -89,7 +89,7 @@ atomic_tests: - name: dynamic-linker based rootkit (libprocesshider) auto_generated_guid: 1338bf0c-fd0c-48c0-9e65-329f18e2c0d3 description: | - Uses libprocesshider to simulate rootkit behavior by hiding a specific process name via ls.so.preload (see also T1574.006). + Uses libprocesshider to simulate rootkit behavior by hiding a specific process name via ld.so.preload (see also T1574.006). supported_platforms: - linux input_arguments: