diff --git a/atomics/T1219/T1219.yaml b/atomics/T1219/T1219.yaml index 20bb1c4e..6fdad837 100644 --- a/atomics/T1219/T1219.yaml +++ b/atomics/T1219/T1219.yaml @@ -266,6 +266,7 @@ atomic_tests: name: powershell elevation_required: true - name: RustDesk Files Detected Test on Windows + auto_generated_guid: f1641ba9-919a-4323-b74f-33372333bf0e description: | An adversary may attempt to trick the user into downloading RustDesk and use this to maintain access to the machine. Download of RustDesk installer will be at the destination location when successfully executed. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 63fdad21..715ec315 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1570,3 +1570,4 @@ bac8a340-be64-4491-a0cc-0985cb227f5a fef0ace1-3550-4bf1-a075-9fea55a778dd 8ce53049-5314-4279-b635-b69c5bed3a36 f0287b58-f4bc-40f6-87eb-692e126e7f8f +f1641ba9-919a-4323-b74f-33372333bf0e