security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generated docs from job=generate-docs branch=master [ci skip]

Browse Source
This commit is contained in:
Atomic Red Team doc generator
2023-02-24 20:41:02 +00:00
parent 51e8522daa
commit e75f2159c5
3 changed files with 39 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/Indexes/index.yaml
+18 -2
View File
@@ -30559,6 +30559,14 @@ privilege-escalation:
description: Name of the service binary, include path.
type: path
default: PathToAtomicsFolder\T1543.003\bin\AtomicService.exe
service_type:
description: Type of service. May be own|share|interact|kernel|filesys|rec|userown|usershare
type: String
default: Own
startup_type:
description: Service start method. May be boot|system|auto|demand|disabled|delayed-auto
type: String
default: auto
service_name:
description: Name of the Service
type: string
@@ -30578,7 +30586,7 @@ privilege-escalation:
name: command_prompt
elevation_required: true
command: |
sc.exe create #{service_name} binPath= #{binary_path}
sc.exe create #{service_name} binPath= #{binary_path} start=#{startup_type} type=#{service_type}
sc.exe start #{service_name}
cleanup_command: |
sc.exe stop #{service_name} >nul 2>&1
@@ -52062,6 +52070,14 @@ persistence:
description: Name of the service binary, include path.
type: path
default: PathToAtomicsFolder\T1543.003\bin\AtomicService.exe
service_type:
description: Type of service. May be own|share|interact|kernel|filesys|rec|userown|usershare
type: String
default: Own
startup_type:
description: Service start method. May be boot|system|auto|demand|disabled|delayed-auto
type: String
default: auto
service_name:
description: Name of the Service
type: string
@@ -52081,7 +52097,7 @@ persistence:
name: command_prompt
elevation_required: true
command: |
sc.exe create #{service_name} binPath= #{binary_path}
sc.exe create #{service_name} binPath= #{binary_path} start=#{startup_type} type=#{service_type}
sc.exe start #{service_name}
cleanup_command: |
sc.exe stop #{service_name} >nul 2>&1
atomics/Indexes/windows-index.yaml
+18 -2
View File
@@ -27111,6 +27111,14 @@ privilege-escalation:
description: Name of the service binary, include path.
type: path
default: PathToAtomicsFolder\T1543.003\bin\AtomicService.exe
service_type:
description: Type of service. May be own|share|interact|kernel|filesys|rec|userown|usershare
type: String
default: Own
startup_type:
description: Service start method. May be boot|system|auto|demand|disabled|delayed-auto
type: String
default: auto
service_name:
description: Name of the Service
type: string
@@ -27130,7 +27138,7 @@ privilege-escalation:
name: command_prompt
elevation_required: true
command: |
sc.exe create #{service_name} binPath= #{binary_path}
sc.exe create #{service_name} binPath= #{binary_path} start=#{startup_type} type=#{service_type}
sc.exe start #{service_name}
cleanup_command: |
sc.exe stop #{service_name} >nul 2>&1
@@ -46070,6 +46078,14 @@ persistence:
description: Name of the service binary, include path.
type: path
default: PathToAtomicsFolder\T1543.003\bin\AtomicService.exe
service_type:
description: Type of service. May be own|share|interact|kernel|filesys|rec|userown|usershare
type: String
default: Own
startup_type:
description: Service start method. May be boot|system|auto|demand|disabled|delayed-auto
type: String
default: auto
service_name:
description: Name of the Service
type: string
@@ -46089,7 +46105,7 @@ persistence:
name: command_prompt
elevation_required: true
command: |
sc.exe create #{service_name} binPath= #{binary_path}
sc.exe create #{service_name} binPath= #{binary_path} start=#{startup_type} type=#{service_type}
sc.exe start #{service_name}
cleanup_command: |
sc.exe stop #{service_name} >nul 2>&1
atomics/T1543.003/T1543.003.md
+3 -1
View File
@@ -73,6 +73,8 @@ Upon successful execution, powershell will download `AtomicService.exe` from git
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| binary_path | Name of the service binary, include path. | path | PathToAtomicsFolder\T1543.003\bin\AtomicService.exe|
| service_type | Type of service. May be own|share|interact|kernel|filesys|rec|userown|usershare | String | Own|
| startup_type | Service start method. May be boot|system|auto|demand|disabled|delayed-auto | String | auto|
| service_name | Name of the Service | string | AtomicTestService_CMD|
@@ -80,7 +82,7 @@ Upon successful execution, powershell will download `AtomicService.exe` from git
```cmd
sc.exe create #{service_name} binPath= #{binary_path}
sc.exe create #{service_name} binPath= #{binary_path} start=#{startup_type} type=#{service_type}
sc.exe start #{service_name}
```