updating att&ck mappings

Author: its-a-feature

Payload_Type/poseidon/poseidon/agent_code/CHANGELOG.MD

@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## 2.0.26 - 2024-03-08
+
+### Changed
+
+- The latest ATT&CK removed `T1547.011` and replaced it with `T1647` which led to warnings in Mythic's UI
+
 ## 2.0.25 - 2024-03-06
 
 ### Changed

Payload_Type/poseidon/poseidon/agentfunctions/builder.go

@@ -15,7 +15,7 @@ import (
 	"strings"
 )
 
-const version = "2.0.25"
+const version = "2.0.26"
 
 var payloadDefinition = agentstructs.PayloadType{
 	Name:                                   "poseidon",

Payload_Type/poseidon/poseidon/agentfunctions/persist_loginitem.go

@@ -13,8 +13,8 @@ func init() {
 		Description:         "Add a login item for the current user via the LSSharedFileListInsertItemURL function",
 		HelpString:          "persist_loginitem",
 		Version:             1,
-		Author:              "@xorrior",
-		MitreAttackMappings: []string{"T1547.011", "T1547.015"},
+		Author:              "@xorrior, @its_a_feature_",
+		MitreAttackMappings: []string{"T1547.015", "T1647"},
 		SupportedUIFeatures: []string{},
 		CommandAttributes: agentstructs.CommandAttribute{
 			SupportedOS: []string{agentstructs.SUPPORTED_OS_MACOS},

agent_capabilities.json

@@ -10,6 +10,6 @@
   "architectures": ["x86_64", "arm_64"],
   "c2": ["http", "websocket", "dynamichttp", "poseidon_tcp"],
   "mythic_version": "3.2",
-  "agent_version": "2.0.25",
+  "agent_version": "2.0.26",
   "supported_wrappers": []
 }