Michael Haag
19 lines
431 B
YAML
19 lines
431 B
YAML
---
|
|
attack_technique: T1163
|
|
display_name: rc.common
|
|
|
|
atomic_tests:
|
|
- name: rc.common
|
|
description: |
|
|
Modify rc.common
|
|
|
|
[Reference](https://developer.apple.com/library/content/documentation/MacOSX/Conceptual/BPSystemStartup/Chapters/StartupItems.html)
|
|
|
|
supported_platforms:
|
|
- macos
|
|
|
|
executor:
|
|
name: sh
|
|
command: |
|
|
echo osascript -e 'tell app "Finder" to display dialog "Hello World"' >> /etc/rc.common
|