Skip to content

Drive Badger configuration: exclude Mac OS system directories during exfiltration

License

Notifications You must be signed in to change notification settings

drivebadger/exclude-macos

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 

Repository files navigation

This is an extension for Drive Badger. It provides exclude.list file, containing a list of exclusions compatible with popular rsync program.

The purpose of these exclusions is to decrease the amount of data to be exfiltrated by Drive Badger, and thus to speed up the attack, by eliminating files and directories, that are not valuable in any way to the attacker:

  • several Mac OS system directories (tested on Yosemite and Catalina)

Installing

Clone this repository as /opt/drivebadger/config/exclude-macos directory on your Drive Badger persistent partition.

More information

About

Drive Badger configuration: exclude Mac OS system directories during exfiltration

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published