From 971f54bdf9252341c26d54ea7bc2f9469a0ffa8c Mon Sep 17 00:00:00 2001 From: Atomic Red Team GUID generator Date: Fri, 29 Sep 2023 14:50:42 +0000 Subject: [PATCH] Generate GUIDs from job=generate-docs branch=master [skip ci] --- atomics/T1070/T1070.yaml | 1 + atomics/T1082/T1082.yaml | 2 ++ atomics/used_guids.txt | 3 +++ 3 files changed, 6 insertions(+) diff --git a/atomics/T1070/T1070.yaml b/atomics/T1070/T1070.yaml index 222641e5..782bfec4 100644 --- a/atomics/T1070/T1070.yaml +++ b/atomics/T1070/T1070.yaml @@ -16,6 +16,7 @@ atomic_tests: name: command_prompt elevation_required: true - name: Indicator Manipulation using FSUtil + auto_generated_guid: 96e86706-6afd-45b6-95d6-108d23eaf2e9 description: | Finds a file by user name (if Disk Quotas are enabled), queries allocated ranges for a file, sets a file's short name, sets a file's valid data length, sets zero data for a file, or creates a new file. Upon execution, no output will be displayed. More information about fsutil can be found at https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/fsutil-file diff --git a/atomics/T1082/T1082.yaml b/atomics/T1082/T1082.yaml index 02d8409a..76d629e0 100644 --- a/atomics/T1082/T1082.yaml +++ b/atomics/T1082/T1082.yaml @@ -399,6 +399,7 @@ atomic_tests: elevation_required: true name: command_prompt - name: Check computer location + auto_generated_guid: 96be6002-9200-47db-94cb-c3e27de1cb36 description: | Looks up country code configured in the registry, likely geofence. Upon execution, country code info will be displayed. - https://tria.ge/210111-eaz8mqhgh6/behavioral1 @@ -409,6 +410,7 @@ atomic_tests: reg query "HKEY_CURRENT_USER\Control Panel\International\Geo" name: command_prompt - name: BIOS Information Discovery through Registry + auto_generated_guid: f2f91612-d904-49d7-87c2-6c165d23bead description: | Looks up for BIOS information in the registry. BIOS information is often read in order to detect sandboxing environments. Upon execution, BIOS information will be displayed. - https://tria.ge/210111-eaz8mqhgh6/behavioral1 diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 23513173..8c3d1100 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1393,3 +1393,6 @@ c88ef166-50fa-40d5-a80c-e2b87d4180f7 b1a4d687-ba52-4057-81ab-757c3dc0d3b5 d3d9af44-b8ad-4375-8b0a-4bff4b7e419c ab76e34f-28bf-441f-a39c-8db4835b89cc +96e86706-6afd-45b6-95d6-108d23eaf2e9 +96be6002-9200-47db-94cb-c3e27de1cb36 +f2f91612-d904-49d7-87c2-6c165d23bead