From bbc47aa36154ecd213a4b4938b8e8a74644d6216 Mon Sep 17 00:00:00 2001 From: Atomic Red Team GUID generator Date: Tue, 23 May 2023 02:48:59 +0000 Subject: [PATCH] Generate GUIDs from job=generate-docs branch=master [skip ci] --- atomics/T1560.001/T1560.001.yaml | 1 + atomics/used_guids.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/atomics/T1560.001/T1560.001.yaml b/atomics/T1560.001/T1560.001.yaml index 748d42e6..624a52d9 100644 --- a/atomics/T1560.001/T1560.001.yaml +++ b/atomics/T1560.001/T1560.001.yaml @@ -277,6 +277,7 @@ atomic_tests: cleanup_command: | rm -Rf #{test_folder} - name: 'Encrypts collected data with AES-256 and Base64' + auto_generated_guid: a743e3a6-e8b2-4a30-abe7-ca85d201b5d3 description: |- An adversary may compress all the collected data, encrypt and send them to a C2 server using base64 encoding. This atomic test tries to emulate the behaviour of the FLEXIROOT backdoor to archive the collected data. FLEXIROOT typically utilizes AES encryption and base64 encoding to transfer the encrypted data to the C2 server. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index bb66ad07..95d7e836 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1331,3 +1331,4 @@ edddff85-fee0-499d-9501-7d4d2892e79b 6d99f93c-da56-49e3-b195-163090ace4f6 8a0b1579-5a36-483a-9cde-0236983e1665 0b2eadeb-4a64-4449-9d43-3d999f4a317b +a743e3a6-e8b2-4a30-abe7-ca85d201b5d3