Skip to content

Commit

Permalink
Update dscacheutil with 2 new use cases, fix descriptions
Browse files Browse the repository at this point in the history
I fixed the two descriptions of the previous version (one had a typo) and one I believe is better explained like this.
  • Loading branch information
marcopedrinazzi authored May 23, 2024
1 parent 463a625 commit f1aff76
Showing 1 changed file with 22 additions and 2 deletions.
24 changes: 22 additions & 2 deletions LOOBins/dscacheutil.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,21 +7,37 @@ full_description: |-
created: 2023-08-23
example_use_cases:
- name: Lookup a user
description: List the user information
description: List the user information for <USER_NAME>
code: dscacheutil -q user -a name <USER_NAME>
tactics:
- Discovery
tags:
- bash
- zsh
- name: Lookup all users
description: List the all users information
description: List all the users information
code: dscacheutil -q user
tactics:
- Discovery
tags:
- bash
- zsh
- name: Lookup a group
description: List the group information for <GROUP_NAME>
code: dscacheutil -q group -a name <GROUP_NAME>
tactics:
- Discovery
tags:
- bash
- zsh
- name: Lookup all groups
description: List all the groups information
code: dscacheutil -q group
tactics:
- Discovery
tags:
- bash
- zsh
paths:
- /usr/bin/dscacheutil
detections:
Expand All @@ -32,3 +48,7 @@ resources:
url: https://macosbin.com/bin/dscacheutil
- name: "dscacheutil man page"
url: https://ss64.com/osx/dscacheutil.html
- name: "MITRE ATT&CK: T1069.002 Permission Groups Discovery: Domain Groups"
url: https://attack.mitre.org/techniques/T1069/002/
- name: "MITRE ATT&CK: T1087.002 Account Discovery: Domain Account"
url: https://attack.mitre.org/techniques/T1087/002/

0 comments on commit f1aff76

Please sign in to comment.