From bd48d02679be98d3ff5a6ea3437afe19a39e0414 Mon Sep 17 00:00:00 2001 From: Atomic Red Team GUID generator Date: Tue, 20 Sep 2022 21:53:49 +0000 Subject: [PATCH] Generate GUIDs from job=generate-docs branch=master [skip ci] --- atomics/T1218.011/T1218.011.yaml | 1 + atomics/used_guids.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/atomics/T1218.011/T1218.011.yaml b/atomics/T1218.011/T1218.011.yaml index c7c5ec63..0f172677 100644 --- a/atomics/T1218.011/T1218.011.yaml +++ b/atomics/T1218.011/T1218.011.yaml @@ -39,6 +39,7 @@ atomic_tests: rundll32 vbscript:"\..\mshtml,RunHTMLApplication "+String(CreateObject("WScript.Shell").Run("#{command_to_execute}"),0) name: command_prompt - name: Rundll32 execute VBscript command using Ordinal number + auto_generated_guid: 32d1cf1b-cbc2-4c09-8d05-07ec5c83a821 description: | Test execution of a command using rundll32.exe and VBscript in a similar manner to the JavaScript test. Technique documented by Hexacorn- http://www.hexacorn.com/blog/2019/10/29/rundll32-with-a-vbscript-protocol/ diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index f3e3b8de..db63384a 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1146,3 +1146,4 @@ f450461c-18d1-4452-9f0d-2c42c3f08624 c2587b8d-743d-4985-aa50-c83394eaeb68 d5d5a6b0-0f92-42d8-985d-47aafa2dd4db 13117939-c9b2-4a43-999e-0a543df92f0d +32d1cf1b-cbc2-4c09-8d05-07ec5c83a821