diff --git a/atomics/T1027/T1027.yaml b/atomics/T1027/T1027.yaml index 1f3d5692..4288d3ae 100644 --- a/atomics/T1027/T1027.yaml +++ b/atomics/T1027/T1027.yaml @@ -102,6 +102,7 @@ atomic_tests: name: command_prompt - name: DLP Evasion via Sensitive Data in VBA Macro over email + auto_generated_guid: 129edb75-d7b8-42cd-a8ba-1f3db64ec4ad description: | Upon successful execution, an excel containing VBA Macro containing sensitive data will be sent outside the network using email. Sensitive data includes about around 20 odd simulated credit card numbers that passes the LUHN check. @@ -131,6 +132,7 @@ atomic_tests: name: powershell - name: DLP Evasion via Sensitive Data in VBA Macro over HTTP + auto_generated_guid: e2d85e66-cb66-4ed7-93b1-833fc56c9319 description: | Upon successful execution, an excel containing VBA Macro containing sensitive data will be sent outside the network using HTTP. Sensitive data includes about around 20 odd simulated credit card numbers that passes the LUHN check. diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 0bb65a42..92eef968 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -699,3 +699,5 @@ ddfb0bc1-3c3f-47e9-a298-550ecfefacbd f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3 43c3a49d-d15c-45e6-b303-f6e177e44a9a d03bfcd3-ed87-49c8-8880-44bb772dea4b +129edb75-d7b8-42cd-a8ba-1f3db64ec4ad +e2d85e66-cb66-4ed7-93b1-833fc56c9319