diff --git a/atomics/T1558.004/T1558.004.yaml b/atomics/T1558.004/T1558.004.yaml index 5efff34e..2b458c88 100644 --- a/atomics/T1558.004/T1558.004.yaml +++ b/atomics/T1558.004/T1558.004.yaml @@ -2,6 +2,7 @@ attack_technique: T1558.004 display_name: 'Steal or Forge Kerberos Tickets: AS-REP Roasting' atomic_tests: - name: Rubeus asreproast + auto_generated_guid: 615bd568-2859-41b5-9aed-61f6a88e48dd description: | Information on the Rubeus tool and it's creators found here: https://github.com/GhostPack/Rubeus#asreproast This build targets .NET 4.5. If targeting a different version you will need to compile Rubeus diff --git a/atomics/used_guids.txt b/atomics/used_guids.txt index 4051f6a4..a8291305 100644 --- a/atomics/used_guids.txt +++ b/atomics/used_guids.txt @@ -763,3 +763,4 @@ eeb9751a-d598-42d3-b11c-c122d9c3f6c7 9d77fed7-05f8-476e-a81b-8ff0472c64d0 aa6cb8c4-b582-4f8e-b677-37733914abda 9c10dc6b-20bd-403a-8e67-50ef7d07ed4e +615bd568-2859-41b5-9aed-61f6a88e48dd