diff --git a/ttps/discovery/get-running-processes/README.md b/ttps/discovery/get-running-processes/README.md deleted file mode 100644 index f0ed01b..0000000 --- a/ttps/discovery/get-running-processes/README.md +++ /dev/null @@ -1,23 +0,0 @@ -# macOS Get Running Processes - -![Community TTP - VVX7](https://img.shields.io/badge/Community_TTP-green) - -Utilize ps to view currently running processes. - -## Pre-requisites - -Ensure that ps is installed on the target system and that you have the necessary -permissions to run it. - -## Examples - -Utilize ps to view currently running processes. This TTP does not produce -artifacts, so it is not necessary to run the clean up afterward: - -```bash -ttpforge run ttps/discovery/macos/get-running-processes/get-running-processes.yaml -``` - -## Steps - -1. **Run PS**: Execute ps to view currently running processes. diff --git a/ttps/discovery/get-running-processes/get-running-processes.yaml b/ttps/discovery/get-running-processes/get-running-processes.yaml deleted file mode 100644 index c3b11e8..0000000 --- a/ttps/discovery/get-running-processes/get-running-processes.yaml +++ /dev/null @@ -1,20 +0,0 @@ ---- -name: Gather macOS running processes. -description: | - This TTP uses ps to gather information about running processes on the system. -mitre: - tactics: - - T0007 Discovery - techniques: - - T1057 Process Discovery - -steps: - - name: run-ps - inline: | - echo -e "===> Gathering running processes using ps..." - ps aux - echo "[+] DONE!" - - cleanup: - inline: | - echo "No cleanup required for this TTP..."