diff --git a/atomics/T1562.001/T1562.001.yaml b/atomics/T1562.001/T1562.001.yaml index 29b3a793..ead08640 100644 --- a/atomics/T1562.001/T1562.001.yaml +++ b/atomics/T1562.001/T1562.001.yaml @@ -729,6 +729,7 @@ atomic_tests: name: powershell elevation_required: true - name: Disable Windows Defender with PwSh Disable-WindowsOptionalFeature + auto_generated_guid: f542ffd3-37b4-4528-837f-682874faa012 description: | The following Atomic will attempt to disable Windows-Defender using the built in PowerShell cmdlet Disable-WindowsOptionalFeature, Deployment Image Servicing and Management tool. Similar to DISM.exe, this cmdlet is used to enumerate, install, uninstall, configure, and update features and packages in Windows images. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index e43b8bf6..132fb567 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1138,3 +1138,4 @@ b1729c57-9384-4d1c-9b99-9b220afb384e 6f2c5c87-a4d5-4898-9bd1-47a55ecaf1dd 9c6d799b-c111-4749-a42f-ec2f8cb51448 c6f25ec3-6475-47a9-b75d-09ac593c5ecb +f542ffd3-37b4-4528-837f-682874faa012