forked from p15670423/monkey
Remove Privilege escalation/T1504 in attack_schema
Shows it twice in ATT&CK matrix in the configuration, but shows it only once in the ATT&CK matrix in the report section.
This commit is contained in:
parent
8bb5096add
commit
ef6bb52302
|
@ -102,23 +102,6 @@ SCHEMA = {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"privilege_escalation": {
|
|
||||||
"title": "Privilege escalation",
|
|
||||||
"type": "object",
|
|
||||||
"link": "https://attack.mitre.org/tactics/TA0004/",
|
|
||||||
"properties": {
|
|
||||||
"T1504": {
|
|
||||||
"title": "PowerShell profile",
|
|
||||||
"type": "bool",
|
|
||||||
"value": True,
|
|
||||||
"necessary": False,
|
|
||||||
"link": "https://attack.mitre.org/techniques/T1504",
|
|
||||||
"description": "Adversaries may gain persistence and elevate privileges "
|
|
||||||
"in certain situations by abusing PowerShell profiles which "
|
|
||||||
"are scripts that run when PowerShell starts."
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"defence_evasion": {
|
"defence_evasion": {
|
||||||
"title": "Defence evasion",
|
"title": "Defence evasion",
|
||||||
"type": "object",
|
"type": "object",
|
||||||
|
|
Loading…
Reference in New Issue