Skip to content

Commit

Permalink
Generate GUIDs from job=generate-docs branch=master [skip ci]
Browse files Browse the repository at this point in the history
  • Loading branch information
Atomic Red Team GUID generator committed Jan 18, 2024
1 parent 640330c commit 9141822
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 0 deletions.
2 changes: 2 additions & 0 deletions atomics/T1548.002/T1548.002.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -669,6 +669,7 @@ atomic_tests:
elevation_required: true

- name: Disable UAC notification via registry keys
auto_generated_guid: 160a7c77-b00e-4111-9e45-7c2a44eda3fd
description: |
This atomic regarding UACDisableNotify pertains to the notification behavior of UAC. UAC is a critical security feature in Windows that prevents unauthorized changes to the operating system. It prompts the user for permission or an administrator password before allowing actions that could affect the system's operation or change settings that affect other users. The BlotchyQuasar RAT defense evasion activities that the adversary to disable UAC notifications makes it easier for malware and malicious software to execute with elevated privileges. [Article](https://securityintelligence.com/x-force/x-force-hive0129-targeting-financial-institutions-latam-banking-trojan/)
supported_platforms:
Expand All @@ -681,6 +682,7 @@ atomic_tests:
name: command_prompt

- name: Disable ConsentPromptBehaviorAdmin via registry keys
auto_generated_guid: a768aaa2-2442-475c-8990-69cf33af0f4e
description: |
This atomic regarding setting ConsentPromptBehaviorAdmin to 0 configures the UAC so that it does not prompt for consent or credentials when actions requiring elevated privileges are performed by users in the administrators group. This means that any operation that would normally trigger a UAC prompt will proceed automatically without user interaction.
supported_platforms:
Expand Down
2 changes: 2 additions & 0 deletions atomics/used_guids.txt
Original file line number Diff line number Diff line change
Expand Up @@ -1543,3 +1543,5 @@ f89812e5-67d1-4f49-86fa-cbc6609ea86a
e5eedaed-ad42-4c1e-8783-19529738a349
1f896ce4-8070-4959-8a25-2658856a70c9
5b380e96-b0ef-4072-8a8e-f194cb9eb9ac
160a7c77-b00e-4111-9e45-7c2a44eda3fd
a768aaa2-2442-475c-8990-69cf33af0f4e

0 comments on commit 9141822

Please sign in to comment.