Skip to content

Commit

Permalink
Generate GUIDs from job=generate-docs branch=master [skip ci]
Browse files Browse the repository at this point in the history
  • Loading branch information
Atomic Red Team GUID generator committed Jan 17, 2024
1 parent b8e521c commit 7b0ba0b
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 0 deletions.
1 change: 1 addition & 0 deletions atomics/T1543.003/T1543.003.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -175,6 +175,7 @@ atomic_tests:
sc.exe \\#{remote_host} stop #{service_name} >nul 2>&1
sc.exe \\#{remote_host} delete #{service_name} >nul 2>&1
- name: Modify Service to Run Arbitrary Binary (Powershell)
auto_generated_guid: 1f896ce4-8070-4959-8a25-2658856a70c9
description: |
This test will use PowerShell to temporarily modify a service to run an arbitrary executable by changing its binary path and will then revert the binary path change, restoring the service to its original state.
This technique was previously observed through SnapMC's use of Powerspolit's invoke-serviceabuse function.
Expand Down
1 change: 1 addition & 0 deletions atomics/used_guids.txt
Original file line number Diff line number Diff line change
Expand Up @@ -1541,3 +1541,4 @@ f89812e5-67d1-4f49-86fa-cbc6609ea86a
062f92c9-28b1-4391-a5f8-9d8ca6852091
14d55b96-b2f5-428d-8fed-49dc4d9dd616
e5eedaed-ad42-4c1e-8783-19529738a349
1f896ce4-8070-4959-8a25-2658856a70c9

0 comments on commit 7b0ba0b

Please sign in to comment.