pub static LINUX_BASHRC_USER: ArtifactDescriptorExpand description
~/.bashrc — per-user Bash interactive shell startup (T1546.004).
Sourced for every non-login interactive bash shell. Attackers add aliases, functions, or background processes here. Survives reboots.