Commit Graph

2555 Commits

Author SHA1 Message Date
patel-bhavin 2dd769d9be revert_id 2022-02-07 16:23:02 -08:00
patel-bhavin 27f3e17155 Merge branch 'AutoSUID_linux' of github.com:redcanaryco/atomic-red-team into AutoSUID_linux 2022-02-07 12:28:24 -08:00
patel-bhavin 72b3e05233 remove uuid 2022-02-07 12:28:09 -08:00
Bhavin Patel a47bc9f742 Merge branch 'master' into AutoSUID_linux 2022-02-07 12:23:51 -08:00
patel-bhavin d18666e8f8 uuid 2022-02-07 12:23:34 -08:00
patel-bhavin aa504f2b42 minor 2022-02-07 12:15:12 -08:00
CircleCI Atomic Red Team doc generator ccb98851fe Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:33:54 +00:00
CircleCI Atomic Red Team GUID generator 872d256108 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:33:49 +00:00
Leo Verlod 58ecf3b2c0 Adding T1562.001 Test 27 - Disable Defender with Defender Control (#1765)
* Adding T1562.001 Test 27 - Disable Defender with Defender Control

This test is designed to disable Windows Defender with the "Defender Control" freeware.

* Updating T1562.001 Test 27 for Efficiency

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-02-07 08:33:33 -07:00
CircleCI Atomic Red Team doc generator da23e1e4b3 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:30:23 +00:00
CircleCI Atomic Red Team GUID generator 0e2c45bc4a Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:30:15 +00:00
Kelsey Seymour 20bb31380d Addition of T1546.015 (#1764)
* Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

* Revert "Addition of T1546.015"

This reverts commit c6442f7526f84820ac12f5a3a3934f39dcc98c1d.

* Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

* Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

Revert "Addition of T1546.015"

This reverts commit c6442f7526f84820ac12f5a3a3934f39dcc98c1d.

Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

* Proper DLL

Noticed older version uploaded.  This is the proper one, and matched to AtomicTest.cpp

* update dll url and leave dll on disk

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-02-07 08:29:34 -07:00
CircleCI Atomic Red Team doc generator 742483f51c Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:05:14 +00:00
CircleCI Atomic Red Team GUID generator 8443011f02 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:05:09 +00:00
lucasRiley e029a0734d T1036 (#1763)
* T1036

* Update T1036.yaml

* updated description

* correct outfile param

* Add -force to avoid error msg

* update zip url

Co-authored-by: Riley <lriley@NTI.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-02-07 08:04:43 -07:00
CircleCI Atomic Red Team doc generator effcf8b023 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-05 02:53:33 +00:00
CircleCI Atomic Red Team GUID generator 3e31df7f38 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-05 02:53:26 +00:00
Rimsha3108 b63dbfa127 T1218.011_update (#1761)
Co-authored-by: Rimsha Alam <ralam@nti.local>
2022-02-04 20:52:52 -06:00
patel-bhavin a6f43cc194 linenum tool 2022-02-04 16:26:47 -08:00
patel-bhavin dfa63a2977 updates to rpre reg 2022-02-04 12:55:31 -08:00
patel-bhavin 4332495289 AutoSUID exeuction 2022-02-04 12:14:27 -08:00
CircleCI Atomic Red Team doc generator b5c2dc6f78 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 18:25:24 +00:00
CircleCI Atomic Red Team GUID generator 150b02825d Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 18:25:18 +00:00
Michael Haag 5eecde1f27 DSInternals - Get-ADReplAccount (#1760) 2022-02-04 12:24:57 -06:00
CircleCI Atomic Red Team doc generator 4173795808 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:35:07 +00:00
CircleCI Atomic Red Team GUID generator 883151e2b7 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:35:01 +00:00
frack113 57c097aac0 Add phant0m test (#1759)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-02-04 09:34:34 -06:00
CircleCI Atomic Red Team doc generator 422699b556 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:23:19 +00:00
CircleCI Atomic Red Team GUID generator 02653f0263 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:23:13 +00:00
frack113 c9788df1c1 T1555.003 edge (#1758)
* Add T1555.003 Egde

* fix cleanup
2022-02-04 09:22:41 -06:00
CircleCI Atomic Red Team doc generator 6835dffd2e Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-03 17:54:53 +00:00
CircleCI Atomic Red Team GUID generator a870578ef4 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-03 17:54:46 +00:00
Bhavin Patel 0e0df960e5 Merge branch 'master' into master 2022-02-03 09:52:28 -08:00
CircleCI Atomic Red Team doc generator 454ad2308d Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-02 16:27:57 +00:00
CircleCI Atomic Red Team GUID generator aeaded3b08 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-02 16:27:51 +00:00
nsher07 f9c2a9b69e New Atomic T1543.003 Tiny Turla Backdoor Service w64time (#1756)
* Update T1543.003.yaml

Atomic - T1045.003 - TinyTurla backdoor service w64time
It's running Dll as service to emulate the tine turla backdoor

* Create W64Time.cpp

* The Dll file for T145.003 Tiny Turla

* Fixed YAML syntax

* add blog link to description

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-02-02 10:27:20 -06:00
Wojciech Lesicki cdb8cbe726 Merge branch 'master' into master 2022-02-01 00:50:38 +01:00
CircleCI Atomic Red Team doc generator 5e043ef568 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 22:59:43 +00:00
Jose Enrique Hernandez 5b28237584 Add links to navigator (#1752)
* added link object, removed comments

* only adds links when parent technique actually has a yaml

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-01-31 16:59:15 -06:00
CircleCI Atomic Red Team doc generator ebe64397be Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 20:33:23 +00:00
Jose Enrique Hernandez 355d170d62 added link object, removed comments (#1751) 2022-01-31 14:32:50 -06:00
CircleCI Atomic Red Team doc generator 6190062a52 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 19:14:49 +00:00
CircleCI Atomic Red Team GUID generator 152d4e5926 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 19:14:44 +00:00
frack113 4843c6212a Add firefox profile (#1750) 2022-01-31 13:14:24 -06:00
CircleCI Atomic Red Team doc generator 87b786fc7e Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 16:56:12 +00:00
Leo Verlod 58615ef861 Automating getprereqs and fixing prereq errors for T1087.001 Test 5 (#1749)
* Automating getprereqs and fixing prereq errors for T1087.001 Test 5

Updating T1087.001 Test 5 to automatically install the login package that contains lastlog, as well as resolving an issue with its prereqs that results in an unexpected eof error.

* add original guid back in

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-01-31 10:55:54 -06:00
CircleCI Atomic Red Team doc generator d2fe61bf55 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 16:52:15 +00:00
frack113 be58951361 T1550.002 fix test 2 (#1747)
* fix test 2

* fix crackmapexec
2022-01-31 10:51:40 -06:00
WojciechLesicki 901633f873 Removing auto_generated_guid 2022-01-31 00:54:57 +01:00
WojciechLesicki bb9e9f3796 again...correcting list 2022-01-30 23:21:19 +01:00