From 4e884a3e761d71dbdd89cf78a822c4244366e1b7 Mon Sep 17 00:00:00 2001 From: Desiree Beck Date: Wed, 16 Dec 2020 15:34:52 -0500 Subject: [PATCH] added mbc mapping in impact namespace --- impact/inhibit-system-recovery/delete-volume-shadow-copies.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml b/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml index 8e26465f..8aac89fd 100644 --- a/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml +++ b/impact/inhibit-system-recovery/delete-volume-shadow-copies.yml @@ -6,6 +6,8 @@ rule: scope: function att&ck: - Impact::Inhibit System Recovery [T1490] + mbc: + - Impact::Disk Content Wipe::Delete Shadow Drive [F0014.001] examples: - B87E9DD18A5533A09D3E48A7A1EFBCF6:0x140006AF0 features: