Files
atomic-red-team/atomics/T1144/T1144.yaml
T
Austin Robertson 5cb3fed680 General YAML cleanup (#305)
* Fix string interpolation from ${foo} to #{foo} across all atomics

* remove non-ASCII characters from atomics YAML

* fix erroneous input_arguments
2018-07-26 16:31:50 -06:00

24 lines
442 B
YAML

---
attack_technique: T1144
display_name: Gatekeeper Bypass
atomic_tests:
- name: Gatekeeper Bypass
description: |
Gatekeeper Bypass via command line
supported_platforms:
- macos
input_arguments:
app_path:
description: Path to app to be used
type: Path
default: myapp.app
executor:
name: sh
command: |
sudo xattr -r -d com.apple.quarantine #{app_path}
sudo spctl --master-disable