Add new pages.
This commit is contained in:
@@ -0,0 +1,82 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# Atomic Red Team
|
||||
|
||||
Atomic Red Team is an open-source library of tests that security teams can
|
||||
use to simulate adversarial activity in their environments.
|
||||
|
||||
## Fast
|
||||
|
||||
Atomic tests run in five minutes or less and require minimal setup. Spend less
|
||||
time configuring and more time testing!
|
||||
|
||||
## Focused
|
||||
|
||||
Security teams don't want to operate with a "hopes and prayers" attidude towards
|
||||
detection. Atomic tests are mapped to the MITRE ATT&CK matrix, so you always
|
||||
know which techniques you do and don't detect.
|
||||
|
||||
## Community-driven
|
||||
|
||||
Atomic Red Team is open source and community developed. By working together, we
|
||||
can develop a fuller picture of the security landscape.
|
||||
|
||||
## Download Atomic Red Team
|
||||
|
||||
Ready to start testing? Download the library from GitHub [here](https://github.com/redcanaryco/atomic-red-team),
|
||||
or check out the [Getting started](https://github.com/redcanaryco/atomic-red-team/wiki/Getting-Started)
|
||||
page of the Atomic Red Team documentation.
|
||||
|
||||
---
|
||||
|
||||
# Roll the dice
|
||||
|
||||
Not sure where to start? Roll the dice to select a random Atomic Test from the catalog.
|
||||
|
||||
<div style="text-align: center; margin-bottom: 30px;">
|
||||
<a class="btn btn-roll-the-dice" href="javascript:void(0);" onclick="roll_the_dice()">Roll the dice!</a>
|
||||
</div>
|
||||
|
||||
<table id="roll-the-dice" style="width: auto; margin: 0 auto; display: table; min-width: 700px; max-width: 700px;">
|
||||
<tr>
|
||||
<th style="width: 120px"><strong>Tactic</strong></th>
|
||||
<td class="randoms">
|
||||
<h2 class="random-tactic-name"></h2>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<th><strong>Technique</strong></th>
|
||||
<td class="randoms">
|
||||
<h2 class="random-technique-name"></h2>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<th><strong>Atomic Test</strong></th>
|
||||
<td class="randoms">
|
||||
<h2 class="random-test-name"></h2>
|
||||
<blockquote class="random-test-description" style="display: block;"></blockquote>
|
||||
<div class="random-test-platforms">
|
||||
<h3>
|
||||
Platforms:
|
||||
<em></em>
|
||||
</h3>
|
||||
</div>
|
||||
<div class="random-test-input-arguments">
|
||||
<h3>Input Arguments:</h3>
|
||||
<pre></pre>
|
||||
</div>
|
||||
<hr/>
|
||||
<h3 class="random-test-executor-name"></h3>
|
||||
<pre class="random-test-executor-steps" style="max-width: 700px"></pre>
|
||||
<hr/>
|
||||
<p>Learn more at <a class="random-test-link" href="#"></a></p>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
Thanks to [Tim Malcomvetter](https://medium.com/@malcomvetter/red-team-use-of-mitre-att-ck-f9ceac6b3be2)
|
||||
and [Tim McGuffin](https://www.twitter.com/NotMedic) for their idea!
|
||||
|
||||
<script src="{{ '/assets/javascripts/roll-the-dice.js?v=' | append: site.github.build_revision | relative_url }}"></script>
|
||||
@@ -0,0 +1,24 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# AtomicTestHarnesses
|
||||
|
||||
AtomicTestHarnesses is a PowerShell module that simulates multiple variations
|
||||
on a single attack technique.
|
||||
|
||||
## Complexity simplified
|
||||
|
||||
The exact details of a technique can vary from attack to attack.
|
||||
With AtomicTestHarnesses, you can test for multiple versions of an attack at
|
||||
once.
|
||||
|
||||
## Validated testing
|
||||
|
||||
AtomicTestHarnesses includes a suite of Pester tests to help you validate your
|
||||
telemetry, so you can stop worrying and get back to testing.
|
||||
|
||||
## Download AtomicTestHarnesses
|
||||
|
||||
Visit the [AtomicTestHarnesses GitHub repository](https://github.com/redcanaryco/atomictestharnesses)
|
||||
for installation instructions, usage guides, and more.
|
||||
@@ -0,0 +1,26 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# Chain Reactor
|
||||
|
||||
Chain Reactor is a tool for testing detection and response coverage on Linux
|
||||
machines.
|
||||
|
||||
## Portable testing for Linux
|
||||
|
||||
Chain Reactor creates executables that can perform sequences of
|
||||
actions like process creation and network connection. Compile your tests once
|
||||
and run them on as many machines as you need!
|
||||
|
||||
## Customizable test files
|
||||
|
||||
Customizing your tests is as easy as editing a JSON file. Specify a list of
|
||||
behaviors and let Chain Reactor do the heavy lifting.
|
||||
|
||||
## Download Chain Reactor
|
||||
|
||||
You can download Chain Reactor directly from the [GitHub repository](https://github.com/redcanaryco/chain-reactor).
|
||||
Want to learn more about configuring and executing tests? Read the
|
||||
[Getting started](https://github.com/redcanaryco/chain-reactor/wiki/Getting-started.md)
|
||||
page of the wiki.
|
||||
@@ -0,0 +1,27 @@
|
||||
---
|
||||
layout: default
|
||||
---
|
||||
|
||||
# Invoke-Atomic
|
||||
|
||||
Invoke-Atomic is a PowerShell-based framework for developing and executing
|
||||
Atomic Red Team tests.
|
||||
|
||||
## Cross-platform support
|
||||
|
||||
Invoke-Atomic runs anywhere PowerShell Core runs. Test on Windows, macOS, and
|
||||
Linux with minimal configuration!
|
||||
|
||||
## Testing at a distance
|
||||
|
||||
With Invoke-Atomic, you can execute tests remotely across a network.
|
||||
|
||||
## New tests made easily
|
||||
|
||||
Invoke-Atomic's atomic GUI makes developing new tests as easy as filling out a
|
||||
form.
|
||||
|
||||
## Download Invoke-Atomic
|
||||
|
||||
Visit the [GitHub repository for Invoke-Atomic](https://github.com/redcanaryco/invoke-atomicredteam)
|
||||
for installation and usage instructions.
|
||||
Reference in New Issue
Block a user