search

redcanaryco / atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.
MIT License
9.56k stars 2.77k forks source link

Fix T1612.yaml #2887

Closed AlbertoPellitteri closed 1 month ago

AlbertoPellitteri commented 1 month ago

Details: I added the --rm option in the docker run command to ensure that once the container is stopped, it is also deleted. This allows to run this test multiple times without raising the "container name already exists" error.

Testing: Tested on Ubuntu

patel-bhavin commented 1 month ago

Great! Thank you for creating this fix, its quite important ensure that the test can run multiple times :)