From c0b144a44a4845a64e2c7eb564cd65a6bbd03371 Mon Sep 17 00:00:00 2001 From: Gavin Knapp Date: Sat, 11 Mar 2023 13:40:18 +0000 Subject: [PATCH] Update T1136.003.yaml removed auto_generated_guid field that was failing checks --- atomics/T1136.003/T1136.003.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/atomics/T1136.003/T1136.003.yaml b/atomics/T1136.003/T1136.003.yaml index 14ec310f..2358c476 100644 --- a/atomics/T1136.003/T1136.003.yaml +++ b/atomics/T1136.003/T1136.003.yaml @@ -64,7 +64,6 @@ atomic_tests: cleanup_command: Remove-AzureADUser -ObjectId "#{userprincipalname}" name: powershell - name: Azure AD - Create a new user via Azure CLI - auto_generated_guid: description: Creates a new user in Azure AD via the Azure CLI. Upon successful creation, a new user will be created. Adversaries create new users so that their malicious activity does not interrupt the normal functions of the compromised users and can remain undetected for a long time. supported_platforms: - azure-ad