Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
This commit is contained in:
parent
f8e0e5b85f
commit
330e495c51
@@ -2,6 +2,7 @@ attack_technique: T1036
|
||||
display_name: "Masquerading"
|
||||
atomic_tests:
|
||||
- name: System File Copied to Unusual Location
|
||||
auto_generated_guid: 51005ac7-52e2-45e0-bdab-d17c6d4916cd
|
||||
description: It may be suspicious seeing a file copy of an EXE in System32 or SysWOW64 to a non-system directory or executing from a non-system directory.
|
||||
supported_platforms:
|
||||
- windows
|
||||
|
||||
@@ -672,3 +672,4 @@ f4983098-bb13-44fb-9b2c-46149961807b
|
||||
f400d1c0-1804-4ff8-b069-ef5ddd2adbf3
|
||||
9d0072c8-7cca-45c4-bd14-f852cfa35cf0
|
||||
bfe6ac15-c50b-4c4f-a186-0fc6b8ba936c
|
||||
51005ac7-52e2-45e0-bdab-d17c6d4916cd
|
||||
|
||||
Reference in New Issue
Block a user