forked from p15670423/monkey
Added descriptions to post breach actions, where it was missing
This commit is contained in:
parent
cc78076d32
commit
a1c11df50b
|
@ -48,6 +48,8 @@ POST_BREACH_ACTIONS = {
|
||||||
"TrapCommand"
|
"TrapCommand"
|
||||||
],
|
],
|
||||||
"title": "Trap",
|
"title": "Trap",
|
||||||
|
"info": "On Linux systems, attempts to trap an interrupt signal in order to execute a command "
|
||||||
|
"upon receiving that signal. Removes the trap afterwards.",
|
||||||
"attack_techniques": ["T1154"]
|
"attack_techniques": ["T1154"]
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
@ -56,6 +58,8 @@ POST_BREACH_ACTIONS = {
|
||||||
"ChangeSetuidSetgid"
|
"ChangeSetuidSetgid"
|
||||||
],
|
],
|
||||||
"title": "Setuid and Setgid",
|
"title": "Setuid and Setgid",
|
||||||
|
"info": "On Linux systems, attempts to set the setuid and setgid bits of a new file. "
|
||||||
|
"Removes the file afterwards.",
|
||||||
"attack_techniques": ["T1166"]
|
"attack_techniques": ["T1166"]
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
@ -64,6 +68,7 @@ POST_BREACH_ACTIONS = {
|
||||||
"ScheduleJobs"
|
"ScheduleJobs"
|
||||||
],
|
],
|
||||||
"title": "Job scheduling",
|
"title": "Job scheduling",
|
||||||
|
"info": "Attempts to create a scheduled job on the system and remove it.",
|
||||||
"attack_techniques": ["T1168", "T1053"]
|
"attack_techniques": ["T1168", "T1053"]
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
|
|
Loading…
Reference in New Issue