T1136 - useradd Linux test to replicate backdoor account from Butter (#444)
T1136 - useradd Linux test to replicate backdoor account from Butter (#444)

* initial commit

* modified output style

* final url changes

* Update rocke-and-roll-stage-01.sh

* T1136 - Added useradd Linux test to replicate Butter attacks pattern

redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team