security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate docs from job=validate_atomics_generate_docs branch=master

Browse Source
This commit is contained in:
CircleCI Atomic Red Team doc generator
2019-12-23 16:00:25 +00:00
parent 9e71e2adcb
commit 223cc1901e
2 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1216/T1216.md
+1 -1
View File
@@ -26,7 +26,7 @@ Executes the signed PubPrn.vbs script with options to download and execute an ar
#### Inputs
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| remote_payload | A remote payload to execute using PubPrn.vbs. | Url | https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/payloads/T1216.sct|
| remote_payload | A remote payload to execute using PubPrn.vbs. | Url | https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/src/T1216.sct|
#### Run it with `command_prompt`!
```
atomics/index.yaml
+8 -4
View File
@@ -11772,7 +11772,7 @@ defense-evasion:
remote_payload:
description: A remote payload to execute using PubPrn.vbs.
type: Url
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/payloads/T1216.sct
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/src/T1216.sct
executor:
name: command_prompt
elevation_required: false
@@ -11817,7 +11817,9 @@ defense-evasion:
command: |
set comspec=#{command_to_execute}
cscript manage-bde.wsf
cleanup_command: set comspec=C:\Windows\System32\cmd.exe
cleanup_command: 'set comspec=C:\Windows\System32\cmd.exe
'
T1151:
technique:
x_mitre_data_sources:
@@ -23177,7 +23179,7 @@ execution:
remote_payload:
description: A remote payload to execute using PubPrn.vbs.
type: Url
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/payloads/T1216.sct
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1216/src/T1216.sct
executor:
name: command_prompt
elevation_required: false
@@ -23222,7 +23224,9 @@ execution:
command: |
set comspec=#{command_to_execute}
cscript manage-bde.wsf
cleanup_command: set comspec=C:\Windows\System32\cmd.exe
cleanup_command: 'set comspec=C:\Windows\System32\cmd.exe
'
T1153:
technique:
x_mitre_data_sources: