|
88 | 88 | "link": "https://attack.mitre.org/techniques/T1156",
|
89 | 89 | "description": "Adversaries may abuse shell scripts by "
|
90 | 90 | "inserting arbitrary shell commands to gain persistence, which "
|
91 |
| - "would be executed every time the user logs in or opens a new shell." |
| 91 | + "would be executed every time the user logs in or opens a new shell.", |
| 92 | + "depends_on": ["T1504"] |
92 | 93 | },
|
93 | 94 | "T1136": {
|
94 | 95 | "title": "Create account",
|
|
117 | 118 | "link": "https://attack.mitre.org/techniques/T1168/",
|
118 | 119 | "description": "Linux supports multiple methods for creating pre-scheduled and "
|
119 | 120 | "periodic background jobs. Job scheduling can be used by adversaries to "
|
120 |
| - "schedule running malicious code at some specified date and time." |
| 121 | + "schedule running malicious code at some specified date and time.", |
| 122 | + "depends_on": ["T1053"] |
121 | 123 | },
|
122 | 124 | "T1504": {
|
123 | 125 | "title": "PowerShell profile",
|
|
127 | 129 | "link": "https://attack.mitre.org/techniques/T1504",
|
128 | 130 | "description": "Adversaries may gain persistence and elevate privileges "
|
129 | 131 | "in certain situations by abusing PowerShell profiles which "
|
130 |
| - "are scripts that run when PowerShell starts." |
| 132 | + "are scripts that run when PowerShell starts.", |
| 133 | + "depends_on": ["T1156"] |
131 | 134 | },
|
132 | 135 | "T1053": {
|
133 | 136 | "title": "Scheduled task",
|
|
137 | 140 | "link": "https://attack.mitre.org/techniques/T1053",
|
138 | 141 | "description": "Windows utilities can be used to schedule programs or scripts to "
|
139 | 142 | "be executed at a date and time. An adversary may use task scheduling to "
|
140 |
| - "execute programs at system startup or on a scheduled basis for persistence." |
| 143 | + "execute programs at system startup or on a scheduled basis for persistence.", |
| 144 | + "depends_on": ["T1168"] |
141 | 145 | },
|
142 | 146 | "T1166": {
|
143 | 147 | "title": "Setuid and Setgid",
|
|
0 commit comments