Brian Beyer
1deb39ba9a
* validate input args in command and vice versa * validate the existence of TODOs * Update T1002.yaml * Update T1014.yaml * Update T1022.yaml * Fixed Issues Identified Fixed multiple issues identified by branch in order to push merge
25 lines
472 B
YAML
25 lines
472 B
YAML
---
|
|
attack_technique: T1150
|
|
display_name: Plist Modification
|
|
|
|
atomic_tests:
|
|
- name: Plist Modification
|
|
description: |
|
|
Modify MacOS plist file in one of two directories
|
|
|
|
supported_platforms:
|
|
- macos
|
|
|
|
executor:
|
|
name: manual
|
|
steps: |
|
|
1. Modify a .plist in
|
|
|
|
/Library/Preferences
|
|
|
|
OR
|
|
|
|
~/Library/Preferences
|
|
|
|
2. Subsequently, follow the steps for adding and running via [Launch Agent](Persistence/Launch_Agent.md)
|