Update T1059.004.yaml (#2569)

Co-authored-by: Michael Haag <[email protected]>
redcanaryco · Oct 13, 2023 · bb98289 · bb98289
1 parent c98b35d
commit bb98289
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/atomics/T1059.004/T1059.004.yaml b/atomics/T1059.004/T1059.004.yaml
@@ -230,3 +230,13 @@ atomic_tests:
       ls -la /tmp/art.txt      
     cleanup_command: |
       rm /tmp/art.txt
+- name: Current kernel information enumeration
+  description: |
+    An adversary may want to enumerate the kernel information to tailor their attacks for that particular kernel. The following command will enumerate the kernel information.
+  supported_platforms:
+  - linux
+  executor:
+    name: sh
+    elevation_required: false
+    command: |
+      uname -srm