diff --git a/atomics/T1497.001/T1497.001.yaml b/atomics/T1497.001/T1497.001.yaml index 00c4be06..0ed809c2 100644 --- a/atomics/T1497.001/T1497.001.yaml +++ b/atomics/T1497.001/T1497.001.yaml @@ -1,6 +1,6 @@ --- attack_technique: T1497.001 -display_name: System Checks +display_name: 'Virtualization/Sandbox Evasion: System Checks' atomic_tests: - name: Detect Virtualization Environment (Linux) description: | @@ -36,4 +36,4 @@ atomic_tests: name: sh elevation_required: false command: | - if (ioreg -l | grep -e Manufacturer -e 'Vendor Name' | grep -iE 'Oracle|VirtualBox|VMWare|Parallels') then echo 'Virtualization Environment detected'; fi; \ No newline at end of file + if (ioreg -l | grep -e Manufacturer -e 'Vendor Name' | grep -iE 'Oracle|VirtualBox|VMWare|Parallels') then echo 'Virtualization Environment detected'; fi;