From 29366a39a9986cdbe0e50c67866310faf931535b Mon Sep 17 00:00:00 2001 From: Atomic Red Team GUID generator Date: Thu, 26 Oct 2023 03:41:02 +0000 Subject: [PATCH] Generate GUIDs from job=generate-docs branch=master [skip ci] --- atomics/T1505.005/T1505.005.yaml | 1 + atomics/used_guids.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/atomics/T1505.005/T1505.005.yaml b/atomics/T1505.005/T1505.005.yaml index a940bcfb30..f3fb308fa6 100644 --- a/atomics/T1505.005/T1505.005.yaml +++ b/atomics/T1505.005/T1505.005.yaml @@ -27,6 +27,7 @@ atomic_tests: name: powershell - name: Modify Terminal Services DLL Path + auto_generated_guid: 18136e38-0530-49b2-b309-eed173787471 description: This atomic test simulates the modification of the ServiceDll value in HKLM\System\CurrentControlSet\services\TermService\Parameters. This technique may be leveraged by adversaries to establish persistence by loading a patched version of the DLL containing malicious code. supported_platforms: - windows diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 9df41e2711..d812d6c900 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1408,3 +1408,4 @@ b7037b89-947a-427a-ba29-e7e9f09bc045 e12f5d8d-574a-4e9d-8a84-c0e8b4a8a675 7f66d539-4fbe-4cfa-9a56-4a2bf660c58a d380c318-0b34-45cb-9dad-828c11891e43 +18136e38-0530-49b2-b309-eed173787471