atomic-red-team

Author	SHA1	Message	Date
CircleCI Atomic Red Team doc generator	bcedc9a826	Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]	2021-09-02 15:24:25 +00:00
CircleCI Atomic Red Team GUID generator	216113c9bf	Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]	2021-09-02 15:24:20 +00:00
Michael Haag	ab822b2208	Trust Reconnaissance (#1616 ) Two simple Atomic Tests for domain and forest trust information.	2021-09-02 09:23:44 -06:00
CircleCI Atomic Red Team doc generator	36d49de4c8	Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]	2021-06-24 17:04:33 +00:00
CircleCI Atomic Red Team doc generator	575b36a8e6	Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]	2021-06-24 15:16:54 +00:00
CircleCI Atomic Red Team doc generator	0ff4aada24	Generate docs from job=validate_atomics_generate_docs branch=ATHPowerShellCommandLineParamter	2020-11-09 16:41:52 +00:00
Carrie Roberts	ba178ad2b9	add prereqs for adfind tests (#1282 ) * add prereqs for adfind * typo fixes and executor change	2020-11-06 09:17:04 -07:00
CircleCI Atomic Red Team doc generator	2ef8ebdcf1	Generate docs from job=validate_atomics_generate_docs branch=master	2020-11-04 15:24:54 +00:00
JimmyAstle	6a686bea42	Inital Commit for adfind Ryuk tests (#1275 ) Ransomware actors leverage adfind to perform Active Directory recon. These tests cover most of the behaviors observed via public threat intelligence sources Co-authored-by: Jimmy Astle <jastle@vmware.com> Co-authored-by: Carrie Roberts <clr2of8@gmail.com>	2020-11-04 08:24:13 -07:00
CircleCI Atomic Red Team doc generator	910a2a764a	Generate docs from job=validate_atomics_generate_docs branch=master	2020-09-29 13:53:28 +00:00
CircleCI Atomic Red Team doc generator	53f879ea8e	Generate docs from job=validate_atomics_generate_docs branch=master	2020-06-26 15:23:36 +00:00
Clément Notin	630ac611db	T1482: hide error in check prereq command (#1088 )	2020-06-26 09:23:06 -06:00
CircleCI Atomic Red Team doc generator	75ba087820	Generate docs from job=validate_atomics_generate_docs branch=master	2020-06-25 21:43:43 +00:00
Clément Notin	b52d11fd82	T1482: add PowerView dependency & RSAT notes (#1041 ) Co-authored-by: Carrie Roberts <clr2of8@gmail.com>	2020-06-25 15:43:24 -06:00
CircleCI Atomic Red Team doc generator	8a82e9b66a	Generate docs from job=validate_atomics_generate_docs branch=master	2020-06-18 01:57:35 +00:00
Carrie Roberts	24549e3866	Convert to Mitre ATT&CK sub-technique schema (#1056 ) * Initial transfer of atomics to MITRE subtechniques * Add GUIDs back in, attack_technique to string (#1019) * technique to string and add guids back in * technique to string and add guids back in * technique to string and add guids back in * technique to string and add guids back in * Subtechnique transfer T1220-T1546.005 (#1020) * Create T1222.001.yaml * Create T1222.002.yaml * Create T1505.002.yaml * Update T1543.003.yaml * Update AtomicService.cs * Update T1546.005.yaml * Delete T1222.yaml * Update T1482.yaml * Update T1485.yaml * Update T1220.yaml * Update T1489.yaml * Update T1490.yaml * Update T1496.yaml * Update T1505.003.yaml * Update T1505.yaml * Update T1518.001.yaml * Update T1518.yaml * Update T1529.yaml * Update T1543.004.yaml * Update T1546.001.yaml * Update T1546.002.yaml * Update T1546.002.yaml * Update T1546.001.yaml * Update T1543.004.yaml * Update T1543.002.yaml * Update T1543.001.yaml * Update T1518.001.yaml * Update T1546.004.yaml * Update T1546.003.yaml * Update T1531.yaml * Update T1222.001.yaml * Update T1222.002.yaml * Update T1505.002.yaml * Update T1505.003.yaml * Update T1518.001.yaml * Update T1543.001.yaml * Update T1546.005.yaml * Update T1546.004.yaml * Update T1546.003.yaml * Update T1546.002.yaml * Update T1546.001.yaml * Update T1543.004.yaml * Update T1543.003.yaml * Update T1543.002.yaml * added auto_generated_guid 1220 * added T1222.001 auto_generated_guid * Update T1222.002.yaml added auto_generated_guid entries * Update T1482.yaml auto_generated_guid added * Update T1485.yaml added auto_generated_guids * Update T1489.yaml added auto_generated_guids * Update T1490.yaml added auto_generated_guids * Update T1496.yaml added auto_generated_guid * Update T1505.002.yaml added auto_generated_guid from old T1505 same atomic * Update T1505.003.yaml added auto_generated_guid from previous atomic 1100 * Delete T1505.yaml no longer needed, moved to 1505.002 * Update T1518.yaml added auto_generated_guids * Update T1529.yaml added auto_generated_guids * Update T1531.yaml added auto_generated_guids * Update T1543.001.yaml added auto_generated_guid * Update T1543.002.yaml added auto_generated_guid * Update T1543.004.yaml added auto_generated_guid * Update T1546.001.yaml added auto_generated_guid * Update T1546.002.yaml added auto_generated_guid * Update T1546.003.yaml * Update T1546.004.yaml added auto_generated_guid * Update T1546.005.yaml added auto_generated_guid * add guids back in * fix spacing issue * fix spacing * fix spacing Co-authored-by: Carrie Roberts <clr2of8@gmail.com> * Sub-techniques T1053-T1113 - Updates (#1022) * Sub-techniques T1053-T1113 - Updates Updated techniques for sub-techniques. * minor fixes format fixing * Added GUIDs - Added GUIDs back - Fixed typo (T1054) - Fixed attack_technique from an array to a string * Sub-technique updates T1546.008 through T1574.011 (#1024) * sub technique updates * sub technique updates * sub technique updates * Carrie updates (#1017) * updated T1110,12,13 * updated T1114 * updated T1114 * updated T1115 * updated T1119 * updated T1123,24 * updated T1127 * updated T1114 * updated T1127 * updated T1132 * T1134.004 * T1134.004 * updated T1135 * updated T1136 * updated T1137 * updated T1140 * remove depracted T1153 * updated T1176 * updated T1197 * updated T1201 * updated T1202 * updated T1204 * updated T1207 * updated T1216 * updated T1204 * updated T1217 * updated T1218 * updated T1218 * updated T1219 * updated T1218 * attack_technique to string * Subtechnique transfer (#1025) * T1003 review * T1005 manual review changes * T1027.002 sub-technique review * T1027.004 sub-technique review * T1036 sub-technique review * T1037 sub-technique review * T1048 sub-technique review * YAML bugfixes * Adding auto-generated GUIDs back to tests * merging with Mike's PR * Merging with Carrie's PR * fix spacing Co-authored-by: Carrie Roberts <clr2of8@gmail.com> * Subtechnique fix (#1026) * add atomic_tests: element * add atomic_tests: element * more fixes * more fixes * more fixes * sub technique minor fixes 1 (#1027) * fixes * fixes * more fixes * more fixes * display name fix (#1028) * remove some deprecated stuff. reorganize a little (#1031) * Gendocs fix (#1033) * gendocs updates for subtechniques * add folders * ignore auto generated markdown files * remove tmp files * add tmp files * Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer * navigator layer v3.0 * Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer Co-authored-by: Matt Graeber <60448025+mgraeber-rc@users.noreply.github.com> Co-authored-by: Tsora-Pop <35981510+Tsora-Pop@users.noreply.github.com> Co-authored-by: Michael Haag <mike@redcanary.com> Co-authored-by: CircleCI Atomic Red Team doc generator <email>	2020-06-17 12:55:46 -06:00
CircleCI Atomic Red Team doc generator	35c42f2c61	Generate docs from job=validate_atomics_generate_docs branch=master	2020-05-15 17:19:25 +00:00
Carrie Roberts	71223b2514	backslash fix for markdown (#881 )	2020-03-16 08:50:43 -06:00
Carrie Roberts	6ec7d4bcf0	Specify language for markdown code blocks (#882 ) * specify code block type in markdown * specify code block type in markdown	2020-03-16 08:46:25 -06:00
Tony M Lambert	a4c9ee4430	Replay the Dependencies Merge (#786 ) * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * lowercase url * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * lowercase url * fixing yaml spacing issue * correcting input name * rm to del Co-authored-by: Carrie Roberts <clr2of8@gmail.com>	2020-01-21 12:11:45 -06:00
Tony M Lambert	c3b398e48c	Revert "Add Dependencies section to test Yaml and support to use them… (#773 ) * Revert "Add Dependencies section to test Yaml and support to use them in the PS execution framework (#772)" This reverts commit `511bb87af2`. * Generate docs from job=validate_atomics_generate_docs branch=revert-511bb87af29fb302dbd9e85bd93c2c00a47953ba	2020-01-09 09:12:38 -06:00
Carrie Roberts	511bb87af2	Add Dependencies section to test Yaml and support to use them in the PS execution framework (#772 ) * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * lowercase url	2020-01-09 07:36:07 -07:00
CircleCI Atomic Red Team doc generator	5f087ec34d	Generate docs from job=validate_atomics_generate_docs branch=master	2019-11-21 03:07:05 +00:00
Andrew Beers	5bf01b6c2c	T1482 query ad/domain info (#676 ) * start work * Update T1482.yaml	2019-11-20 21:06:47 -06:00
CircleCI Atomic Red Team doc generator	499c751bcc	Generate docs from job=validate_atomics_generate_docs branch=master	2019-09-03 13:36:10 +00:00
CircleCI Atomic Red Team doc generator	440e85a9c8	Generate docs from job=validate_atomics_generate_docs branch=master	2019-08-30 15:42:59 +00:00
CircleCI Atomic Red Team doc generator	75c332ac52	Generate docs from job=validate_atomics_generate_docs branch=master	2019-08-29 22:18:28 +00:00
CircleCI Atomic Red Team doc generator	6abfe94684	Generate docs from job=validate_atomics_generate_docs branch=master	2019-05-10 19:57:12 +00:00
Tony M Lambert	5897b9aef1	T1482 Domain Trust Discovery (#495 ) * Update ATT&CK json for technique creation * T1482 - Domain Trust Discovery	2019-05-10 13:56:56 -06:00

29 Commits