diff --git a/atomics/T1547.008/T1547.008.yaml b/atomics/T1547.008/T1547.008.yaml index 28102bab..6d20b84b 100644 --- a/atomics/T1547.008/T1547.008.yaml +++ b/atomics/T1547.008/T1547.008.yaml @@ -2,6 +2,7 @@ attack_technique: T1547.008 display_name: 'Boot or Logon Autostart Execution: LSASS Driver' atomic_tests: - name: Modify Registry to load Arbitrary DLL into LSASS - LsaDbExtPt + auto_generated_guid: 8ecef16d-d289-46b4-917b-0dba6dc81cf1 description: | The following Atomic will modify an undocumented registry key that may be abused to load a arbitrary DLL into LSASS. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 4395c3cf..dc208e1d 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1133,3 +1133,4 @@ a21118de-b11e-4ebd-b655-42f11142df0c 0d80d088-a84c-4353-af1a-fc8b439f1564 b1729c57-9384-4d1c-9b99-9b220afb384e 1b83cddb-eaa7-45aa-98a5-85fb0a8807ea +8ecef16d-d289-46b4-917b-0dba6dc81cf1