security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]

Browse Source
This commit is contained in:
CircleCI Atomic Red Team GUID generator
2021-08-27 20:09:26 +00:00
parent 173155eaa6
commit cf00395732
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1134.002/T1134.002.yaml
+1
View File
@@ -2,6 +2,7 @@ attack_technique: T1134.002
display_name: "Create Process with Token"
atomic_tests:
- name: Access Token Manipulation
auto_generated_guid: dbf4f5a9-b8e0-46a3-9841-9ad71247239e
description: |
This Action demonstrates how an access token for a specific program can spawn another program under a different owner.
Adversaries can leverage access tokens to run programs under a different user not only to achieve privilege escalation but also to evade detection by blending in with normal user activity.
atomics/used_guids.txt
+1
View File
@@ -779,3 +779,4 @@ db53959c-207d-4000-9e7a-cd8eb417e072
36753ded-e5c4-4eb5-bc3c-e8fba236878d
bc071188-459f-44d5-901a-f8f2625b2d2e
d1253f6e-c29b-49dc-b466-2147a6191932
dbf4f5a9-b8e0-46a3-9841-9ad71247239e