Merge pull request #1614 from redcanaryco/complete-art-io-site-migration
Delete docs directory
This commit is contained in:
@@ -1,13 +0,0 @@
|
||||
title: Atomic Red Team
|
||||
description: |
|
||||
Atomic Red Team is a library of simple tests that every security team can execute to test their defenses. Tests are
|
||||
focused, have few dependencies, and are defined in a structured format that can be used by automation frameworks.
|
||||
show_downloads: true
|
||||
google_analytics:
|
||||
theme: jekyll-theme-cayman
|
||||
github:
|
||||
is_project_page: true
|
||||
repository_url: https://github.com/redcanaryco/atomic-red-team
|
||||
repository_name: Atomic Red Team
|
||||
owner_name: Red Canary
|
||||
owner_url: https://github.com/redcanaryco
|
||||
@@ -1,59 +0,0 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="{{ site.lang | default: "en-US" }}">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
|
||||
{% seo %}
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<meta name="theme-color" content="#157878">
|
||||
<link rel="stylesheet" href="{{ '/assets/css/style.css?v=' | append: site.github.build_revision | relative_url }}">
|
||||
<link rel="icon" type="image/png" href="assets/images/favicon.png">
|
||||
|
||||
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
|
||||
<script src="https://cdnjs.cloudflare.com/ajax/libs/js-yaml/3.12.0/js-yaml.min.js" ></script>
|
||||
</head>
|
||||
<body>
|
||||
<section class="page-header" style="background-image: url('assets/images/product-features-bg.png');
|
||||
background-position: center center; background-size: cover ">
|
||||
<div style="margin-bottom: 20px;">
|
||||
<div style="display: inline-block; width: 300px;">
|
||||
<img src="assets/images/Atomic-Red-Team-Logo.png" width="200px"/>
|
||||
</div>
|
||||
<div style="display: inline-block; width: 60%; max-width: 750px; text-align: left">
|
||||
<h1 class="project-name">{{ site.title | default: site.github.repository_name }}</h1>
|
||||
<h2 class="project-tagline">{{ site.description | default: site.github.project_tagline }}</h2>
|
||||
</div>
|
||||
</div>
|
||||
<a href="/" class="btn">Home</a>
|
||||
<a href="atomicredteam" class="btn">Atomic Red Team</a>
|
||||
<a href="invokeatomic" class="btn">Invoke-AtomicRedTeam</a>
|
||||
<a href="atomictestharnesses" class="btn">AtomicTestHarnesses</a>
|
||||
<a href="chainreactor" class="btn">Chain Reactor</a>
|
||||
<!-- <a href="{{ site.github.repository_url }}" class="btn">View on GitHub</a> -->
|
||||
<a href="https://slack.atomicredteam.io/" class="btn">Join on Slack</a>
|
||||
</section>
|
||||
|
||||
<section class="main-content">
|
||||
{{ content }}
|
||||
|
||||
<footer class="site-footer" style="text-align: center; margin-top: 100px">
|
||||
<a href="{{ site.github.repository_url }}">{{ site.github.repository_name }}</a> is maintained by
|
||||
<p><a href="https://www.redcanary.com"><img src="https://redcanary.com/wp-content/uploads/header_logo1.png" height="50px" alt="Red Canary"/></a></p>
|
||||
</footer>
|
||||
</section>
|
||||
|
||||
{% if site.google_analytics %}
|
||||
<script>
|
||||
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
|
||||
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
|
||||
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
|
||||
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
|
||||
ga('create', '{{ site.google_analytics }}', 'auto');
|
||||
ga('send', 'pageview');
|
||||
</script>
|
||||
{% endif %}
|
||||
|
||||
<!-- <script src="{{ base.url | prepend: site.url }}/assets/javascripts/{{ page.path | replace: 'md', 'js' }}"></script> -->
|
||||
|
||||
</body>
|
||||
</html>
|
||||
@@ -1,26 +0,0 @@
|
||||
---
|
||||
---
|
||||
|
||||
//$header-bg-color-secondary: #CE232E;
|
||||
$header-bg-color-secondary: #CE232E;
|
||||
$header-bg-color: #d6757c;
|
||||
|
||||
$section-headings-color: #CE232E;
|
||||
|
||||
@import "{{ site.theme }}";
|
||||
|
||||
html {
|
||||
font-size: 14px;
|
||||
}
|
||||
|
||||
.btn.btn-roll-the-dice {
|
||||
font-size: 2em;
|
||||
color: white;
|
||||
background: #CE232E;
|
||||
padding: 10px 50px;
|
||||
margin: 0 auto;
|
||||
}
|
||||
|
||||
table#roll-the-dice th {
|
||||
vertical-align: top;
|
||||
}
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 298 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 6.3 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 1.2 MiB |
Binary file not shown.
|
Before Width: | Height: | Size: 484 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 554 KiB |
@@ -1,55 +0,0 @@
|
||||
$(document).ready(function () {
|
||||
$.get("https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/Indexes/index.yaml", function (data) {
|
||||
window.atomic_index = jsyaml.safeLoad(data);
|
||||
});
|
||||
|
||||
$('.randoms > *').hide()
|
||||
});
|
||||
|
||||
roll_the_dice = function () {
|
||||
$('.randoms > *').hide();
|
||||
var tactic_name = Object.keys(window.atomic_index)[Math.floor(Math.random() * Object.keys(window.atomic_index).length)];
|
||||
var tactic = window.atomic_index[tactic_name]
|
||||
console.log("Random tactic:")
|
||||
console.log(tactic_name)
|
||||
console.log(tactic)
|
||||
|
||||
var technique_name = Object.keys(tactic)[Math.floor(Math.random() * Object.keys(tactic).length)];
|
||||
var technique = tactic[technique_name]
|
||||
console.log("Random technique:")
|
||||
console.log(technique_name)
|
||||
console.log(technique)
|
||||
|
||||
var test = technique.atomic_tests[Math.floor(Math.random() * technique.atomic_tests.length)];
|
||||
console.log("Random test:")
|
||||
console.log(test)
|
||||
|
||||
$('.random-tactic-name').text(tactic_name.toUpperCase()).fadeIn(function () {
|
||||
setTimeout(function () {
|
||||
$('.random-technique-name').text(technique_name).fadeIn(function () {
|
||||
setTimeout(function () {
|
||||
if(test == undefined){
|
||||
$('.random-test-name').text("No Test Found :(").fadeIn();
|
||||
$('.random-test-description').html("<a target='_blank' href='https://github.com/redcanaryco/atomic-red-team/wiki/Contributing'>Add your own?</a>").fadeIn();
|
||||
} else {
|
||||
$('.random-test-name').text(test.name).fadeIn();
|
||||
$('.random-test-description').text(test.description).fadeIn();
|
||||
$('.random-test-platforms em').text(test.supported_platforms).fadeIn();
|
||||
if (test.input_arguments) {
|
||||
$('.random-test-input-arguments pre').text(jsyaml.safeDump(test.input_arguments)).fadeIn();
|
||||
} else {
|
||||
$('.random-test-input-arguments').hide()
|
||||
}
|
||||
$('.random-test-executor-name').text("Run with " + test.executor.name).fadeIn();
|
||||
$('.random-test-executor-steps').text(test.executor.command).fadeIn();
|
||||
var link = "https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/" +
|
||||
technique.technique.identifier + "/" + technique.technique.identifier + ".md"
|
||||
$('.random-test-link').attr('href', link)
|
||||
$('.random-test-link').text(link).fadeIn();
|
||||
$('.randoms > *').show()
|
||||
} // END if/else
|
||||
}, 500);
|
||||
});
|
||||
}, 500);
|
||||
});
|
||||
}
|
||||
@@ -1,82 +0,0 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# Atomic Red Team
|
||||
|
||||
Atomic Red Team is an open-source library of tests that security teams can
|
||||
use to simulate adversarial activity in their environments.
|
||||
|
||||
## Fast
|
||||
|
||||
Atomic tests run in five minutes or less and require minimal setup. Spend less
|
||||
time configuring and more time testing!
|
||||
|
||||
## Focused
|
||||
|
||||
Security teams don't want to operate with a "hopes and prayers" attitude towards
|
||||
detection. Atomic tests are mapped to the [MITRE ATT&CK](https://attack.mitre.org/) matrix, so you always
|
||||
know which techniques you do and don't detect.
|
||||
|
||||
## Community-driven
|
||||
|
||||
Atomic Red Team is open source and community developed. By working together, we
|
||||
can develop a fuller picture of the security landscape.
|
||||
|
||||
## Download Atomic Red Team
|
||||
|
||||
Ready to start testing? Download the library from GitHub [here](https://github.com/redcanaryco/atomic-red-team),
|
||||
or check out the [Getting started](https://github.com/redcanaryco/atomic-red-team/wiki/Getting-Started)
|
||||
page of the Atomic Red Team documentation.
|
||||
|
||||
---
|
||||
|
||||
# Roll the dice
|
||||
|
||||
Not sure where to start? Roll the dice to select a random Atomic Test from the catalog.
|
||||
|
||||
<div style="text-align: center; margin-bottom: 30px;">
|
||||
<a class="btn btn-roll-the-dice" href="javascript:void(0);" onclick="roll_the_dice()">Roll the dice!</a>
|
||||
</div>
|
||||
|
||||
<table id="roll-the-dice" style="width: auto; margin: 0 auto; display: table; min-width: 700px; max-width: 700px;">
|
||||
<tr>
|
||||
<th style="width: 120px"><strong>Tactic</strong></th>
|
||||
<td class="randoms">
|
||||
<h2 class="random-tactic-name"></h2>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<th><strong>Technique</strong></th>
|
||||
<td class="randoms">
|
||||
<h2 class="random-technique-name"></h2>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<th><strong>Atomic Test</strong></th>
|
||||
<td class="randoms">
|
||||
<h2 class="random-test-name"></h2>
|
||||
<blockquote class="random-test-description" style="display: block;"></blockquote>
|
||||
<div class="random-test-platforms">
|
||||
<h3>
|
||||
Platforms:
|
||||
<em></em>
|
||||
</h3>
|
||||
</div>
|
||||
<div class="random-test-input-arguments">
|
||||
<h3>Input Arguments:</h3>
|
||||
<pre></pre>
|
||||
</div>
|
||||
<hr/>
|
||||
<h3 class="random-test-executor-name"></h3>
|
||||
<pre class="random-test-executor-steps" style="max-width: 700px"></pre>
|
||||
<hr/>
|
||||
<p>Learn more at <a class="random-test-link" href="#"></a></p>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
Thanks to [Tim Malcomvetter](https://medium.com/@malcomvetter/red-team-use-of-mitre-att-ck-f9ceac6b3be2)
|
||||
and [Tim McGuffin](https://www.twitter.com/NotMedic) for their idea!
|
||||
|
||||
<script src="{{ '/assets/javascripts/roll-the-dice.js?v=' | append: site.github.build_revision | relative_url }}"></script>
|
||||
@@ -1,24 +0,0 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# AtomicTestHarnesses
|
||||
|
||||
AtomicTestHarnesses is a PowerShell module that simulates multiple variations
|
||||
of a single attack technique.
|
||||
|
||||
## Complexity reduced
|
||||
|
||||
The exact details of a technique can vary from attack to attack.
|
||||
With AtomicTestHarnesses, you can test for multiple variations of an attack at
|
||||
once.
|
||||
|
||||
## Validated testing
|
||||
|
||||
AtomicTestHarnesses includes a suite of Pester tests to help you validate your
|
||||
telemetry, so you can stop worrying and get back to testing.
|
||||
|
||||
## Download AtomicTestHarnesses
|
||||
|
||||
Visit the [AtomicTestHarnesses GitHub repository](https://github.com/redcanaryco/atomictestharnesses)
|
||||
for installation instructions, usage guides, and more.
|
||||
@@ -1,26 +0,0 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# Chain Reactor
|
||||
|
||||
Chain Reactor is a tool for testing detection and response coverage on Linux
|
||||
machines.
|
||||
|
||||
## Portable testing for Linux
|
||||
|
||||
Chain Reactor creates executables that can perform sequences of
|
||||
actions like process creation and network connection. Compile your tests once
|
||||
and run them on as many machines as you need!
|
||||
|
||||
## Customizable test files
|
||||
|
||||
Customizing your tests is as easy as editing a JSON file. Specify a list of
|
||||
behaviors and let Chain Reactor do the heavy lifting.
|
||||
|
||||
## Download Chain Reactor
|
||||
|
||||
You can download Chain Reactor directly from the [GitHub repository](https://github.com/redcanaryco/chain-reactor).
|
||||
Want to learn more about configuring and executing tests? Read the
|
||||
[Getting started](https://github.com/redcanaryco/chain-reactor/wiki/Getting-started.md)
|
||||
page of the wiki.
|
||||
@@ -1,40 +0,0 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# Meet the Atomic Family
|
||||
|
||||
The Atomic Family makes it easier than ever to mount an effective defense
|
||||
against malicious activity.
|
||||
|
||||
## Atomic Red Team
|
||||
|
||||
A library of simple, focused tests mapped to the MITRE ATT&CK® matrix. Each
|
||||
test runs in five minutes or less, and many tests come with easy-to-use
|
||||
configuration and cleanup commands.
|
||||
|
||||
## Invoke-Atomic
|
||||
|
||||
A PowerShell-based framework for developing and executing atomic tests. With
|
||||
PowerShell Core, security teams can execute tests across multiple platforms and
|
||||
over a network.
|
||||
|
||||
## AtomicTestHarnesses
|
||||
|
||||
A PowerShell module for executing many variations of an attack technique at
|
||||
once. AtomicTestHarnesses also includes tests to validate test execution and
|
||||
telemetry.
|
||||
|
||||
## Chain Reactor
|
||||
|
||||
A tool for testing detection and response coverage on Linux machines. Chain
|
||||
Reactor produces customizable executables that simulate sequences of actions
|
||||
like process creation and network connection.
|
||||
|
||||
# Join the community
|
||||
|
||||
Stay connected by joining our
|
||||
[Slack workspace](https://slack.atomicredteam.io/).
|
||||
|
||||
Subscribe to the [Red Canary blog](https://redcanary.com/blog/) for tips,
|
||||
tricks, and updates.
|
||||
@@ -1,27 +0,0 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# Invoke-Atomic
|
||||
|
||||
Invoke-Atomic is a PowerShell-based framework for developing and executing
|
||||
Atomic Red Team tests.
|
||||
|
||||
## Cross-platform support
|
||||
|
||||
Invoke-Atomic runs anywhere PowerShell Core runs. Test on Windows, macOS, and
|
||||
Linux with minimal configuration!
|
||||
|
||||
## Testing at a distance
|
||||
|
||||
With Invoke-Atomic, you can execute tests remotely across a network.
|
||||
|
||||
## New tests made easily
|
||||
|
||||
Invoke-Atomic's atomic GUI makes developing new tests as easy as filling out a
|
||||
form.
|
||||
|
||||
## Download Invoke-Atomic
|
||||
|
||||
Visit the [GitHub repository for Invoke-Atomic](https://github.com/redcanaryco/invoke-atomicredteam)
|
||||
for installation and usage instructions.
|
||||
Reference in New Issue
Block a user