security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate GUIDs from job=generate-docs branch=master [skip ci]

Browse Source
This commit is contained in:
Atomic Red Team GUID generator
2024-03-01 19:23:17 +00:00
parent 498aecdb83
commit 82729bc3bc
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1542.001/T1542.001.yaml
+1
View File
@@ -2,6 +2,7 @@ attack_technique: T1542.001
display_name: "Pre-OS Boot: System Firmware"
atomic_tests:
- name: UEFI Persistence via Wpbbin.exe File Creation
auto_generated_guid: b8a49f03-e3c4-40f2-b7bb-9e8f8fdddbf1
description: |
Creates Wpbbin.exe in %systemroot%. This technique can be used for UEFI-based pre-OS boot persistence mechanisms.
- https://grzegorztworek.medium.com/using-uefi-to-inject-executable-files-into-bitlocker-protected-drives-8ff4ca59c94c
atomics/used_guids.txt
+1
View File
@@ -1576,3 +1576,4 @@ a9b93f17-31cb-435d-a462-5e838a2a6026
3b0df731-030c-4768-b492-2a3216d90e53
424e18fd-48b8-4201-8d3a-bf591523a686
f095e373-b936-4eb4-8d22-f47ccbfbe64a
b8a49f03-e3c4-40f2-b7bb-9e8f8fdddbf1