From fd2c5239c111352e129609633921efab24cd7948 Mon Sep 17 00:00:00 2001
From: packetzero <20775507+packetzero@users.noreply.github.com>
Date: Thu, 15 Dec 2022 17:30:43 -0600
Subject: [PATCH] T1497.001 linux detect Virtualization - run both cmds

---
 atomics/T1497.001/T1497.001.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/atomics/T1497.001/T1497.001.yaml b/atomics/T1497.001/T1497.001.yaml
index 3407c2c1..67e02f10 100644
--- a/atomics/T1497.001/T1497.001.yaml
+++ b/atomics/T1497.001/T1497.001.yaml
@@ -13,7 +13,8 @@ atomic_tests:
     name: sh
     elevation_required: true 
     command: | 
-      if (systemd-detect-virt || sudo dmidecode | egrep -i 'manufacturer|product|vendor' | grep -iE 'Oracle|VirtualBox|VMWare|Parallels') then echo "Virtualization Environment detected"; fi;
+      if (systemd-detect-virt) then echo "Virtualization Environment detected"; fi;
+      if (sudo dmidecode | egrep -i 'manufacturer|product|vendor' | grep -iE 'Oracle|VirtualBox|VMWare|Parallels') then echo "Virtualization Environment detected"; fi;
 - name: Detect Virtualization Environment (Windows)
   auto_generated_guid: 502a7dc4-9d6f-4d28-abf2-f0e84692562d
   description: |