From de4c70570b5a26bbdb3dcbab3bacb86332c2d934 Mon Sep 17 00:00:00 2001 From: Atomic Red Team GUID generator Date: Tue, 2 Aug 2022 21:07:30 +0000 Subject: [PATCH] Generate GUIDs from job=generate-docs branch=master [skip ci] --- atomics/T1014/T1014.yaml | 2 ++ atomics/used_guids.txt | 2 ++ 2 files changed, 4 insertions(+) diff --git a/atomics/T1014/T1014.yaml b/atomics/T1014/T1014.yaml index a065f80b..8f0ba450 100644 --- a/atomics/T1014/T1014.yaml +++ b/atomics/T1014/T1014.yaml @@ -87,6 +87,7 @@ atomic_tests: name: sh elevation_required: true - name: dynamic-linker based rootkit (libprocesshider) + auto_generated_guid: 1338bf0c-fd0c-48c0-9e65-329f18e2c0d3 description: | Uses libprocesshider to simulate rootkit behavior by hiding a specific process name via ls.so.preload (see also T1574.006). supported_platforms: @@ -126,6 +127,7 @@ atomic_tests: name: sh elevation_required: true - name: Loadable Kernel Module based Rootkit (Diamorphine) + auto_generated_guid: 0b996469-48c6-46e2-8155-a17f8b6c2247 description: | Loads Diamorphine kernel module, which hides itself and a processes. supported_platforms: diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 407c5ad4..714e9d4c 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -1106,3 +1106,5 @@ a27418de-bdce-4ebd-b655-38f11142bf0c 22d89a2f-d475-4895-b2d4-68626d49c029 93c150f5-ad7b-4ee3-8992-df06dec2ac79 89422c87-b57b-4a04-a12a-802bb11d06121 +1338bf0c-fd0c-48c0-9e65-329f18e2c0d3 +0b996469-48c6-46e2-8155-a17f8b6c2247