search

redcanaryco / atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.
MIT License
9.76k stars 2.8k forks source link

Update T1070.002.yaml #2847

Closed liorfigman closed 3 months ago

liorfigman commented 4 months ago

Details:

truncate cmd on macOS doesn't support full '--size' option https://man.freebsd.org/cgi/man.cgi?query=truncate&sektion=1&format=html Testing:

testcase raises a usage error

Associated Issues: