76 Commits

Author SHA1 Message Date
Hare Sudhan aa9b3454fe Fix Azure AD CSV Index and MITRE ATT&CK Navigator JSON (#3301)
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2026-04-17 23:30:19 -04:00
Hare Sudhan f63a2ac494 ATT&CK v17 changes (#3107)
Thanks Hare!
2025-05-01 11:12:40 -04:00
Carrie Roberts aa84d5dceb Update the ATT&CK Navigator Layers to v16 (#3049) 2025-02-05 17:36:08 -05:00
Hare Sudhan 0efaba9ff0 update to MITRE ATT&CK 16 (#2990) 2024-11-19 20:34:41 -05:00
Hare Sudhan 3bf390b116 Python conversion of maintenance commands (#2739)
* updating atomics count in README.md [ci skip]

* converting python

* rename

* fix path

* minor refactor

---------

Co-authored-by: publish bot <opensource@redcanary.com>
2024-04-07 08:52:35 -06:00
Hare Sudhan e742bcb626 Fix schema validation (#2666) 2024-01-20 14:44:16 -06:00
Hare Sudhan 201ad3b17f Validator changes (#2622) 2023-11-28 09:58:02 -06:00
Hare Sudhan 2f26d9917a Duplicate guid fix (#2609)
* duplicate guid fix

* duplicate guid fix
2023-11-17 09:28:12 -08:00
Hare Sudhan 7dfdc97d79 FreeBSD Cleanup (#2603)
* FreeBSD Cleanup

* cleanup

* fix t1016

* reducing multiline if else to single line

* fix t1037.003

* ignore T1003.007

* fix t1003.007

* more fixes
2023-11-13 16:45:43 -05:00
Hare Sudhan 62a85c12b5 FreeBSD changes (#2585)
* freebsd changes

* renaming freebsd to linux
2023-11-06 17:41:43 -05:00
Hare Sudhan 0c13f29a1f fix validate.py 2023-11-01 20:10:27 -04:00
Jose Enrique Hernandez 2c1db3e4dd Merge branch 'master' into master 2023-11-01 19:10:13 -04:00
Alton Johnson, OSCP, OSCE e2474f6e12 replaced File.exists? with File.exist? (#2511) 2023-08-15 16:53:26 -06:00
Hare Sudhan a1d082bdbb YAML schema fix (#2505)
* yaml schema fix

* change yaml structure
2023-08-01 19:24:22 -06:00
Hare Sudhan 20d3a0432f Fix Github action to generate labels for changed atomics (#2497) 2023-07-29 18:23:50 -04:00
Hare Sudhan 0736dfbda9 Fix svg counter (#2498)
* fix svg counter

* poetry update
2023-07-29 16:18:41 -06:00
Hare Sudhan 74e8721392 Include freebsd in the schema 2023-06-09 01:27:31 -04:00
Hare Sudhan b262c88ac8 minor bug fix for the validation and labels (#2438) 2023-05-24 11:08:41 -05:00
Hare Sudhan b498741fa4 added auto assign code 2023-05-19 17:35:09 -04:00
Carrie Roberts 7955fa8daa update nav version and attack data (#2429) 2023-05-19 11:05:25 -06:00
Hare Sudhan a3ff1d8d40 validation fix (#2425) 2023-05-17 13:38:27 -06:00
Hare Sudhan e563055a69 (enhancement) CI validations (#2419)
* more validations added

* rename bin

* fnmatch fix
2023-05-15 09:36:19 -06:00
Josh Rickard 284886292b Atomic Red Team - JSON Schema Validation CI (#2303)
* feat: Adding atomic-red-team JSON Schema defintions

* feat: Adding validate.py script to validate all atomics against the defined schema

* feat: Adding validate-schema GitHub Workflow action to validate on every push to the repo

* ci: Updated the validate-schema workflow to support and use Ruby instead of python

* fix: Updated schema to remove schema draft version (not necessarily needed) and update to remove elevation_required as a required defined property

* fix: Removed the yaml schema version

* docs: Adding start of README

* fix: Adding an updated/better version of the python validation but may ultimately be removed

* feat: Adding Ruby version of validate.rb script

* fix: Removing files not needed since we are changing to github action and using the new validation code

* fix: Adding the yaml schema file back and removed the json version

* docs: Updated README with documentation

* fix: Updating schema to use new format validator

* fix: Updated validate.rb to verify that the Technique IDs are in the correct format.

* fix: Upating validate.rb to raise execptions so that failures flow up to the GitHub Action workflow

* fix: Updated all tests that have input_arguments not conformaing to schema defintion for type value of path

* fix: Updating the Validaton README for typos

* fixL: Minor updates to the schema

* minor schema changes

* github actions fix

* schema changes

---------

Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
Co-authored-by: Hare Sudhan <code@0x6c.dev>
2023-05-12 15:33:47 -06:00
Jose Enrique Hernandez eff6370693 add counter parts (#2389) 2023-03-27 16:23:55 -06:00
Josh Rickard 028a179f3f fix: Fixing index file names by removing colon and replacing with underscore (#2318)
Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com>
2023-02-06 15:01:14 -07:00
Josh Rickard a24028a3e3 Add platform based indexes (#2311)
* feat: Adding call to generate YAML index files broken out by platform type based on the supported_platforms array values.

* feat: Add new method generate_yaml_index_by_platform to generate yaml indexes based on the provided platform type

* feat: Added new method atomic_tests_for_technique_by_platform to retrieve techniques from API and add atomic_tests based on the provided platform vbalue

---------

Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-02-06 11:36:25 -07:00
Carrie Roberts 0ce94db3b3 bump nav version (#2261) 2023-01-03 22:25:44 -05:00
Brian c6368a624d Updating ATT&CK and Navigator (#2244)
This should update the Navigator layers from ATT&CK 11 to 12 and from Navigator 4.5.5 to 4.7.1
2022-12-06 18:39:57 -07:00
Hare Sudhan 7b2d3a9db4 Update generate-atomic-docs.rb (#2162) 2022-09-23 16:56:48 -06:00
Carrie Roberts 6ad14bbad9 correct linux indexes (#2132)
see issue #2130, thank you @Thog

Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
2022-09-09 11:12:47 -06:00
Conor Richard e0a7466075 Fixing legend values to match new color value range of 1 to 10+ (#2098)
* Adding changes to address issue #1141: Improving the ATT&CK Layer to make it a one stop shop

* Generated new example files with updates.

* Revert "Adding changes to address issue #1141: Improving the ATT&CK Layer to make it a one stop shop"

This reverts commit aa474653db79112d58cc4f5bb12d4f70cf6811cd.

Reverting to remove the generated example files.

* Reverting JSON files

* Changed color gradient back to two colors and set min to 0 and max to 10

* Fixed the legend to reflect the new color and scale of 1 to 10.
2022-08-25 21:28:41 -05:00
Conor Richard 83e9c279b1 Adding changes to address #1141 new feature request (#2093)
* Adding changes to address issue #1141: Improving the ATT&CK Layer to make it a one stop shop

* Generated new example files with updates.

* Revert "Adding changes to address issue #1141: Improving the ATT&CK Layer to make it a one stop shop"

This reverts commit aa474653db79112d58cc4f5bb12d4f70cf6811cd.

Reverting to remove the generated example files.

* Reverting JSON files

* Changed color gradient back to two colors and set min to 0 and max to 10
2022-08-24 16:35:55 -06:00
Hare Sudhan 8033113bba Generate Indexes for Cloud Atomics (#2075)
* added cloud indexes

* adding indexes for other platoforms
2022-08-10 13:09:00 -06:00
Carrie Roberts 3060cd5e2f update att&ck nav layer version to v11 2022-06-16 16:48:08 -06:00
Carrie Roberts bc3e0c1745 add nav layer filters and update enterprise-attack.json 2022-03-31 21:07:38 -06:00
Jose Enrique Hernandez 5b28237584 Add links to navigator (#1752)
* added link object, removed comments

* only adds links when parent technique actually has a yaml

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-01-31 16:59:15 -06:00
Jose Enrique Hernandez 355d170d62 added link object, removed comments (#1751) 2022-01-31 14:32:50 -06:00
Carrie Roberts d1dd953057 bump navigator layer version (#1745) 2022-01-28 13:31:05 -07:00
Carrie Roberts 697d400d0e bump layer version (#1608) 2021-08-19 08:15:15 -06:00
Jose Enrique Hernandez 74de7af42f adding new platform layer generation (#1599) 2021-08-16 07:54:02 -06:00
Jose Enrique Hernandez d5c5979247 adding url md file for each atomic as a comment (#1530) 2021-06-24 09:31:51 -06:00
Jose Enrique Hernandez 221f3a6027 adding auto generated guids to the md files, closes issue 1501 (#1529) 2021-06-24 09:16:09 -06:00
Carrie Roberts 0c3ab2ea9c update nav layer version (#1409) 2021-04-01 10:50:37 -06:00
MrOrOneEquals1 6e2e9122ab Fix Technique Highlighting (#1272)
Adds technique highlighting when a sub-technique has an atomic written for it.
2020-10-24 08:39:37 -06:00
MrOrOneEquals1 36db298ade Update Layer Names (#1271)
More descriptive Mitre ATT&CK Navigator names.
2020-10-24 08:12:17 -06:00
Carrie Roberts e0d6242f7a add nav score for parent technique (#1269) 2020-10-21 10:48:21 -06:00
Carrie Roberts 24549e3866 Convert to Mitre ATT&CK sub-technique schema (#1056)
* Initial transfer of atomics to MITRE subtechniques

* Add GUIDs back in, attack_technique to string (#1019)

* technique to string and add guids back in

* technique to string and add guids back in

* technique to string and add guids back in

* technique to string and add guids back in

* Subtechnique transfer T1220-T1546.005 (#1020)

* Create T1222.001.yaml

* Create T1222.002.yaml

* Create T1505.002.yaml

* Update T1543.003.yaml

* Update AtomicService.cs

* Update T1546.005.yaml

* Delete T1222.yaml

* Update T1482.yaml

* Update T1485.yaml

* Update T1220.yaml

* Update T1489.yaml

* Update T1490.yaml

* Update T1496.yaml

* Update T1505.003.yaml

* Update T1505.yaml

* Update T1518.001.yaml

* Update T1518.yaml

* Update T1529.yaml

* Update T1543.004.yaml

* Update T1546.001.yaml

* Update T1546.002.yaml

* Update T1546.002.yaml

* Update T1546.001.yaml

* Update T1543.004.yaml

* Update T1543.002.yaml

* Update T1543.001.yaml

* Update T1518.001.yaml

* Update T1546.004.yaml

* Update T1546.003.yaml

* Update T1531.yaml

* Update T1222.001.yaml

* Update T1222.002.yaml

* Update T1505.002.yaml

* Update T1505.003.yaml

* Update T1518.001.yaml

* Update T1543.001.yaml

* Update T1546.005.yaml

* Update T1546.004.yaml

* Update T1546.003.yaml

* Update T1546.002.yaml

* Update T1546.001.yaml

* Update T1543.004.yaml

* Update T1543.003.yaml

* Update T1543.002.yaml

* added auto_generated_guid 1220

* added T1222.001 auto_generated_guid

* Update T1222.002.yaml

added   auto_generated_guid entries

* Update T1482.yaml

  auto_generated_guid added

* Update T1485.yaml

added   auto_generated_guids

* Update T1489.yaml

added   auto_generated_guids

* Update T1490.yaml

added   auto_generated_guids

* Update T1496.yaml

added   auto_generated_guid

* Update T1505.002.yaml

added   auto_generated_guid from old T1505 same atomic

* Update T1505.003.yaml

added  auto_generated_guid from previous atomic 1100

* Delete T1505.yaml

no longer needed, moved to 1505.002

* Update T1518.yaml

added  auto_generated_guids

* Update T1529.yaml

added   auto_generated_guids

* Update T1531.yaml

added   auto_generated_guids

* Update T1543.001.yaml

added   auto_generated_guid

* Update T1543.002.yaml

added   auto_generated_guid

* Update T1543.004.yaml

added   auto_generated_guid

* Update T1546.001.yaml

added   auto_generated_guid

* Update T1546.002.yaml

added   auto_generated_guid

* Update T1546.003.yaml

* Update T1546.004.yaml

added  auto_generated_guid

* Update T1546.005.yaml

added  auto_generated_guid

* add guids back in

* fix spacing issue

* fix spacing

* fix spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>

* Sub-techniques T1053-T1113 - Updates (#1022)

* Sub-techniques T1053-T1113 - Updates

Updated techniques for sub-techniques.

* minor fixes

format fixing

* Added GUIDs

- Added GUIDs back
- Fixed typo (T1054)
- Fixed attack_technique from an array to a string

* Sub-technique updates T1546.008 through T1574.011 (#1024)

* sub technique updates

* sub technique updates

* sub technique updates

* Carrie updates (#1017)

* updated T1110,12,13

* updated T1114

* updated T1114

* updated T1115

* updated T1119

* updated T1123,24

* updated T1127

* updated T1114

* updated T1127

* updated T1132

* T1134.004

* T1134.004

* updated T1135

* updated T1136

* updated T1137

* updated T1140

* remove depracted T1153

* updated T1176

* updated T1197

* updated T1201

* updated T1202

* updated T1204

* updated T1207

* updated T1216

* updated T1204

* updated T1217

* updated T1218

* updated T1218

* updated T1219

* updated T1218

* attack_technique to string

* Subtechnique transfer (#1025)

* T1003 review

* T1005 manual review changes

* T1027.002 sub-technique review

* T1027.004 sub-technique review

* T1036 sub-technique review

* T1037 sub-technique review

* T1048 sub-technique review

* YAML bugfixes

* Adding auto-generated GUIDs back to tests

* merging with Mike's PR

* Merging with Carrie's PR

* fix spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>

* Subtechnique fix (#1026)

* add atomic_tests: element

* add atomic_tests: element

* more fixes

* more fixes

* more fixes

* sub technique minor fixes 1 (#1027)

* fixes

* fixes

* more fixes

* more fixes

* display name fix (#1028)

* remove some deprecated stuff. reorganize a little (#1031)

* Gendocs fix (#1033)

* gendocs updates for subtechniques

* add folders

* ignore auto generated markdown files

* remove tmp files

* add tmp files

* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer

* navigator layer v3.0

* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer

Co-authored-by: Matt Graeber <60448025+mgraeber-rc@users.noreply.github.com>
Co-authored-by: Tsora-Pop <35981510+Tsora-Pop@users.noreply.github.com>
Co-authored-by: Michael Haag <mike@redcanary.com>
Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-06-17 12:55:46 -06:00
Matt Graeber d3291a2507 Merge branch 'master' into index-fix2 2020-05-15 13:25:26 -04:00
Carrie Roberts bc4bcf8946 Merge branch 'master' into guid 2020-05-15 10:56:49 -06:00
clr2of8 171428fe92 fix identifier 2020-05-14 18:53:36 -06:00