Skip to content

Commit

Permalink
rename browser extension directory write
Browse files Browse the repository at this point in the history
  • Loading branch information
jorik-utwente committed Dec 2, 2024
1 parent e48c7fb commit 4137627
Showing 1 changed file with 3 additions and 2 deletions.
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
rule:
meta:
name: persist via browser extension
name: write to browser extension directory
namespace: persistence/file-system
authors:
- j.j.vannielen@utwente.nl
Expand All @@ -10,11 +10,12 @@ rule:
att&ck:
- Persistence::Browser Extensions [T1176]
features:
- description: can be used for browser-based persistence
- and:
- or:
- match: copy file
- match: move file
- match: host-interaction/file-system/write
- match: write file on Windows
- or:
- string: /\\Microsoft\\Edge\\User Data\\Default\\Extensions\\/i
- string: /\\Google\\Chrome\\User Data\\Default\\Extensions\\/i
Expand Down

0 comments on commit 4137627

Please sign in to comment.