Files
atomic-red-team/atomics/T1163/T1163.yaml
T
Michael Haag a1b27e0b8b Rest of Mac converted to Yaml
🏠 🔛 🔥
🚒
🔥
🎆
2018-05-25 13:35:29 -04:00

19 lines
431 B
YAML

---
attack_technique: T1163
display_name: rc.common
atomic_tests:
- name: rc.common
description: |
Modify rc.common
[Reference](https://developer.apple.com/library/content/documentation/MacOSX/Conceptual/BPSystemStartup/Chapters/StartupItems.html)
supported_platforms:
- macos
executor:
name: sh
command: |
echo osascript -e 'tell app "Finder" to display dialog "Hello World"' >> /etc/rc.common