diff --git a/atomics/T1123/T1123.yaml b/atomics/T1123/T1123.yaml index d2c65903..0d85df2b 100644 --- a/atomics/T1123/T1123.yaml +++ b/atomics/T1123/T1123.yaml @@ -12,6 +12,7 @@ atomic_tests: powershell.exe -Command WindowsAudioDevice-Powershell-Cmdlet name: powershell - name: Registry artefact when application use microphone + auto_generated_guid: 7a21cce2-6ada-4f7c-afd9-e1e9c481e44a description: | [can-you-track-processes-accessing-the-camera-and-microphone](https://svch0st.medium.com/can-you-track-processes-accessing-the-camera-and-microphone-7e6885b37072) supported_platforms: diff --git a/atomics/T1125/T1125.yaml b/atomics/T1125/T1125.yaml index 2f569898..58286bfb 100644 --- a/atomics/T1125/T1125.yaml +++ b/atomics/T1125/T1125.yaml @@ -2,6 +2,7 @@ attack_technique: T1125 display_name: Video Capture atomic_tests: - name: Registry artefact when application use webcam + auto_generated_guid: 6581e4a7-42e3-43c5-a0d2-5a0d62f9702a description: | [can-you-track-processes-accessing-the-camera-and-microphone](https://svch0st.medium.com/can-you-track-processes-accessing-the-camera-and-microphone-7e6885b37072) supported_platforms: diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index a63ddff6..09ccb3f5 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -873,3 +873,5 @@ c59f246a-34f8-4e4d-9276-c295ef9ba0dd 14d55ca0-920e-4b44-8425-37eedd72b173 7b9d85e5-c4ce-4434-8060-d3de83595e69 0e1483ba-8f0c-425d-b8c6-42736e058eaa +7a21cce2-6ada-4f7c-afd9-e1e9c481e44a +6581e4a7-42e3-43c5-a0d2-5a0d62f9702a