Felipe Bueno
22 lines
528 B
YAML
22 lines
528 B
YAML
attack_technique: T1647
|
|
display_name: Plist File Modification
|
|
atomic_tests:
|
|
- name: Plist Modification
|
|
auto_generated_guid: 394a538e-09bb-4a4a-95d1-b93cf12682a8
|
|
description: |
|
|
Modify MacOS plist file in one of two directories
|
|
supported_platforms:
|
|
- macos
|
|
executor:
|
|
steps: |
|
|
1. Modify a .plist in
|
|
|
|
/Library/Preferences
|
|
|
|
OR
|
|
|
|
~/Library/Preferences
|
|
|
|
2. Subsequently, follow the steps for adding and running via [Launch Agent](Persistence/Launch_Agent.md)
|
|
name: manual
|