cat

Linux discovery T1083

Concatenate and display file contents. Used for reading sensitive files like /etc/passwd, /etc/shadow, SSH keys, and configuration files.

Binary Paths

  • /bin/cat
  • /usr/bin/cat

Glob Patterns

Pattern Notes
ca?
Wildcard replaces 't'
c*t
Star matches 'a'
c[a]t
Bracket class on second char
ca[t]
Bracket class on last char
/bin/ca?
Full path wildcard
/???/cat
Obfuscate /bin/ prefix
/b?n/cat
Wildcard in bin directory
c?t
Middle wildcard

Pattern Tester

$

Try typing cat or a full path like /bin/cat

YARA Rule

Auto-generated detection rule for cat

      

Resources

← Previous bitsadmin Catalog Next → certutil