From 8a54e19ab7bda7cee5fffd719da53a0c54e90ffd Mon Sep 17 00:00:00 2001
From: CircleCI Atomic Red Team doc generator <email>
Date: Tue, 27 Jul 2021 19:15:57 +0000
Subject: [PATCH] Generate docs from job=generate_and_commit_guids_and_docs
 branch=master [skip ci]

---
 atomics/Indexes/index.yaml     | 4 ++--
 atomics/T1547.007/T1547.007.md | 4 ++++
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/atomics/Indexes/index.yaml b/atomics/Indexes/index.yaml
index ccdbd4fc..f3f54ae4 100644
--- a/atomics/Indexes/index.yaml
+++ b/atomics/Indexes/index.yaml
@@ -15885,7 +15885,7 @@ privilege-escalation:
         command: 'sudo defaults write com.apple.loginwindow LoginHook #{script}
 
 '
-        cleanup: 'sudo defaults delete com.apple.loginwindow LoginHook
+        cleanup_command: 'sudo defaults delete com.apple.loginwindow LoginHook
 
 '
         elevation_required: true
@@ -44102,7 +44102,7 @@ persistence:
         command: 'sudo defaults write com.apple.loginwindow LoginHook #{script}
 
 '
-        cleanup: 'sudo defaults delete com.apple.loginwindow LoginHook
+        cleanup_command: 'sudo defaults delete com.apple.loginwindow LoginHook
 
 '
         elevation_required: true
diff --git a/atomics/T1547.007/T1547.007.md b/atomics/T1547.007/T1547.007.md
index bbda29b0..bd406f5c 100644
--- a/atomics/T1547.007/T1547.007.md
+++ b/atomics/T1547.007/T1547.007.md
@@ -72,6 +72,10 @@ Mac Defaults
 sudo defaults write com.apple.loginwindow LoginHook #{script}
 ```
 
+#### Cleanup Commands:
+```sh
+sudo defaults delete com.apple.loginwindow LoginHook
+```