security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]

Browse Source
This commit is contained in:
CircleCI Atomic Red Team GUID generator
2022-02-07 15:30:15 +00:00
parent 20bb31380d
commit 0e2c45bc4a
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1546.015/T1546.015.yaml
+1
View File
@@ -2,6 +2,7 @@ attack_technique: T1546.015
display_name: 'Event Triggered Execution: Component Object Model Hijacking'
atomic_tests:
- name: COM Hijacking - InprocServer32
auto_generated_guid: 48117158-d7be-441b-bc6a-d9e36e47b52b
description: |-
This test uses PowerShell to hijack a reference to a Component Object Model by creating registry values under InprocServer32 key in the HKCU hive then calling the Class ID to be executed via rundll32.exe.
atomics/used_guids.txt
+1
View File
@@ -860,3 +860,4 @@ a6a5ec26-a2d1-4109-9d35-58b867689329
a0bced08-3fc5-4d8b-93b7-e8344739376e
ae3a8605-b26e-457c-b6b3-2702fd335bac
4449c89b-ec82-43a4-89c1-91e2f1abeecc
48117158-d7be-441b-bc6a-d9e36e47b52b