diff --git a/atomics/T1531/T1531.yaml b/atomics/T1531/T1531.yaml index af6275c7..b847f027 100644 --- a/atomics/T1531/T1531.yaml +++ b/atomics/T1531/T1531.yaml @@ -89,6 +89,7 @@ atomic_tests: name: powershell elevation_required: false - name: Change User Password via passwd + auto_generated_guid: 3c717bf3-2ecc-4d79-8ac8-0bfbf08fbce6 description: | This test changes the user password to hinder access to the account using passwd utility. supported_platforms: @@ -105,6 +106,7 @@ atomic_tests: name: sh elevation_required: true - name: Delete User via dscl utility + auto_generated_guid: 4d938c43-2fe8-4d70-a5b3-5bf239aa7846 description: | This test deletes the user account using the dscl utility. supported_platforms: @@ -130,6 +132,7 @@ atomic_tests: name: sh elevation_required: true - name: Delete User via sysadminctl utility + auto_generated_guid: d3812c4e-30ee-466a-a0aa-07e355b561d6 description: | This test deletes the user account using the sysadminctl utility. supported_platforms: diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 3241d901..041bec3c 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1315,3 +1315,6 @@ e9795c8d-42aa-4ed4-ad80-551ed793d006 335a6b15-b8d2-4a3f-a973-ad69aa2620d7 d1de3767-99c2-4c6c-8c5a-4ba4586474c8 3b625eaa-c10d-4635-af96-3eae7d2a2f3c +3c717bf3-2ecc-4d79-8ac8-0bfbf08fbce6 +4d938c43-2fe8-4d70-a5b3-5bf239aa7846 +d3812c4e-30ee-466a-a0aa-07e355b561d6