4 Commits

Author	SHA1	Message	Date
Atomic Red Team doc generator	5ede8f21e4	Generated docs from job=generate-docs branch=master [ci skip]	2025-02-13 22:03:40 +00:00
Atomic Red Team doc generator	e3aacfbaca	Generated docs from job=generate-docs branch=master [ci skip]	2023-06-26 21:55:02 +00:00
Atomic Red Team GUID generator	8f8d90d9b1	Generate GUIDs from job=generate-docs branch=master [skip ci]	2023-06-26 21:54:44 +00:00
Israel Anitube	5a58c4aafa	Create T1562.009.yaml with "Impair Defenses - Safe Boot Mode" (#2472) ... * Create T1562.009.yaml Details: Allows adversaries to abuse safe mode to disable endpoint defenses that may not start with limited boot. This is achieved by modifying Boot Configuration Data (BCD) stores, which are files that manage boot application settings. Applying the following command which requires elevated privileges, causes the sytsem to boot in safe mode at next startup or restart. "bcdedit /set safeboot network" Testing Testing was successfully carried out on Win 10 x64. Cleanup commands "bcdedit /deletevalue {current} safeboot" was used to restore boot to normal Associated Issues None. * Update T1562.009.yaml --------- Co-authored-by: Carrie Roberts <clr2of8@gmail.com>	2023-06-26 15:53:53 -06:00