diff --git a/atomics/T1112/T1112.yaml b/atomics/T1112/T1112.yaml index 6abed794..6f672071 100644 --- a/atomics/T1112/T1112.yaml +++ b/atomics/T1112/T1112.yaml @@ -693,6 +693,7 @@ atomic_tests: name: command_prompt elevation_required: true - name: Enabling Restricted Admin Mode via Command_Prompt + auto_generated_guid: fe7974e5-5813-477b-a7bd-311d4f535e83 description: | Enabling Restricted Admin Mode via Command_Prompt,enables an attacker to perform a pass-the-hash attack using RDP supported_platforms: diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index d1691091..f61afece 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1198,3 +1198,4 @@ b1cbdf8b-6078-48f5-a890-11ea19d7f8e9 5843529a-5056-4bc1-9c13-a311e2af4ca0 999bff6d-dc15-44c9-9f5c-e1051bfc86e1 40075d5f-3a70-4c66-9125-f72bee87247d +fe7974e5-5813-477b-a7bd-311d4f535e83