Added descriptions to post breach actions, where it was missing

This commit is contained in:
VakarisZ 2020-07-24 11:20:42 +03:00
parent cc78076d32
commit a1c11df50b
1 changed files with 5 additions and 0 deletions

View File

@ -48,6 +48,8 @@ POST_BREACH_ACTIONS = {
"TrapCommand"
],
"title": "Trap",
"info": "On Linux systems, attempts to trap an interrupt signal in order to execute a command "
"upon receiving that signal. Removes the trap afterwards.",
"attack_techniques": ["T1154"]
},
{
@ -56,6 +58,8 @@ POST_BREACH_ACTIONS = {
"ChangeSetuidSetgid"
],
"title": "Setuid and Setgid",
"info": "On Linux systems, attempts to set the setuid and setgid bits of a new file. "
"Removes the file afterwards.",
"attack_techniques": ["T1166"]
},
{
@ -64,6 +68,7 @@ POST_BREACH_ACTIONS = {
"ScheduleJobs"
],
"title": "Job scheduling",
"info": "Attempts to create a scheduled job on the system and remove it.",
"attack_techniques": ["T1168", "T1053"]
}
]