Skip to content

Commit

Permalink
restore original guid
Browse files Browse the repository at this point in the history
  • Loading branch information
clr2of8 authored Oct 26, 2023
1 parent 97dacd3 commit 85a40ee
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions atomics/T1505.005/T1505.005.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@ attack_technique: T1505.005
display_name: 'Server Software Component: Terminal Services DLL'
atomic_tests:
- name: Simulate Patching termsrv.dll
auto_generated_guid: 0b2eadeb-4a64-4449-9d43-3d999f4a317b
description: |
Simulates patching of termsrv.dll by making a benign change to the file and replacing it with the original afterwards.
Before we can make the modifications we need to take ownership of the file and grant ourselves the necessary permissions.
Expand Down

0 comments on commit 85a40ee

Please sign in to comment.