From b7ed04ebd7d7fe57d0b9f8692d8a858aea113db8 Mon Sep 17 00:00:00 2001
From: Mike Hunter <mhunter@lusArs.net>
Date: Thu, 19 Sep 2019 04:24:00 -0700
Subject: [PATCH] Fix a bug in T1081 where the macos version of grep is wrongly
 expected to accept the -P flag and fix a labeling bug in T1201 where a macOS
 command is wrongly described as a Windows command (#573)

---
 atomics/T1081/T1081.yaml | 2 +-
 atomics/T1201/T1201.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/atomics/T1081/T1081.yaml b/atomics/T1081/T1081.yaml
index 39ec18d4..65daeecd 100644
--- a/atomics/T1081/T1081.yaml
+++ b/atomics/T1081/T1081.yaml
@@ -29,7 +29,7 @@ atomic_tests:
   executor:
     name: sh
     command: |
-      grep -riP password #{file_path}
+      grep -ri password #{file_path}
 
 - name: Mimikatz & Kittenz
   description: |
diff --git a/atomics/T1201/T1201.yaml b/atomics/T1201/T1201.yaml
index 141e209d..3e4b8ab8 100644
--- a/atomics/T1201/T1201.yaml
+++ b/atomics/T1201/T1201.yaml
@@ -82,7 +82,7 @@ atomic_tests:
 
 - name: Examine password policy - macOS
   description: |
-    Lists the password policy to console on Windows.
+    Lists the password policy to console on macOS.
 
   supported_platforms:
     - macos