Define conventions for shell emitted under attackmacos/ttp/<tactic>/shell/ and shared runtime in attackmacos/core/base/base.sh: naming, POSIX expectations, and alignment with the YAML builder.
- Generated scripts target POSIX-friendly
/bin/shusage; followdocs/Guides/Naming Conventions.mdfor tactic prefixes and function names. - Match spacing and patterns produced by
cicd/build/procedure_shell.pyandbase.sh(seedocs/CICD/build_shell_procedure.md). - Prefer native macOS / LOLBin commands at runtime; no extra downloads on target for technique execution unless the procedure explicitly documents otherwise.
- After YAML changes:
python3 cicd/build/procedure_shell.py --validatethen build; build runssh -non output.
docs/Guides/Naming Conventions.mddocs/Guides/Shell Style Guide(old).mddocs/CICD/build_shell_procedure.mdattackmacos/core/base/base.sh
Last modified: 2026-05-15
Last modified by: Documentation maintainers
Version: 1.0.0