From befa9a2a43ea33e667ba22b3707d1098ff8caa3b Mon Sep 17 00:00:00 2001 From: Atomic Red Team GUID generator Date: Tue, 15 Aug 2023 01:03:08 +0000 Subject: [PATCH] Generate GUIDs from job=generate-docs branch=master [skip ci] --- atomics/T1218/T1218.yaml | 1 + atomics/used_guids.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/atomics/T1218/T1218.yaml b/atomics/T1218/T1218.yaml index 63a2e12d..42418ad5 100644 --- a/atomics/T1218/T1218.yaml +++ b/atomics/T1218/T1218.yaml @@ -323,6 +323,7 @@ atomic_tests: del %TEMP%\ieuinit.inf >nul 2>&1 name: command_prompt - name: LOLBAS CustomShellHost to Spawn Process + auto_generated_guid: b1eeb683-90bb-4365-bbc2-2689015782fe description: | This test simulates an adversary copying `customshellhost.exe` and `calc.exe` from `C:\windows\system32\` to `C:\temp\`, renaming `calc.exe` to `explorer.exe`. Upon execution, customshellhost.exe will spawn calc.exe. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 446ca194..78ac9dad 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1378,3 +1378,4 @@ de3f8e74-3351-4fdb-a442-265dbf231738 f7d38f47-c61b-47cc-a59d-fc0368f47ed0 11e65d8d-e7e4-470e-a3ff-82bc56ad938e 4d77f913-56f5-4a14-b4b1-bf7bb24298ad +b1eeb683-90bb-4365-bbc2-2689015782fe