Commit Graph

88 Commits

Author SHA1 Message Date
clr2of8 7a5287913e moved guid file to writable location 2020-05-08 00:10:28 -06:00
clr2of8 99916726ac add file to keep track of used guids 2020-05-07 23:59:07 -06:00
clr2of8 ebf10c34bb better regexes 2020-05-07 23:51:14 -06:00
clr2of8 3e6dff9ab7 add guid element 2020-05-07 22:42:41 -06:00
clr2of8 37814e116b add unique (per yaml file) guid 2020-05-07 07:22:35 -06:00
clr2of8 e47f18e28f wip 2020-05-06 19:38:51 -06:00
clr2of8 553f439941 wip 2020-05-06 19:22:52 -06:00
Keith McCammon cd8ef8f5c0 OCD :) (#967)
* OCD :)

* Generate docs from job=validate_atomics_generate_docs branch=atomic_friday

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-05-01 14:03:32 -06:00
Carrie Roberts a39a7b7290 fix links (#927)
Co-authored-by: Michael Haag <mike@redcanary.com>
2020-04-03 20:43:06 -06:00
Carrie Roberts 71223b2514 backslash fix for markdown (#881) 2020-03-16 08:50:43 -06:00
Carrie Roberts 6ec7d4bcf0 Specify language for markdown code blocks (#882)
* specify code block type in markdown

* specify code block type in markdown
2020-03-16 08:46:25 -06:00
Andras32 6b6f7f1a48 Cast to string, strip (#853) 2020-03-02 13:29:48 -07:00
ezr 9e350d5290 Fix docs template carriage return issue (#840)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-02-26 15:00:19 -07:00
Carrie Roberts a3ebb13bb6 Build check (#816)
* move emond test into correct T#

* only show cleanup with inputs if there are inputs

* ensure both prereq and get_prereq commands are specified

Co-authored-by: Tony M Lambert <ForensicITGuy@users.noreply.github.com>
Co-authored-by: Michael Haag <mike@redcanary.com>
2020-02-05 10:31:08 -07:00
Andras32 d127147734 Removed prereq command from execution tree in spec.yaml (#800) 2020-01-26 17:35:53 -07:00
Tony M Lambert a4c9ee4430 Replay the Dependencies Merge (#786)
* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* lowercase url

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* lowercase url

* fixing yaml spacing issue

* correcting input name

* rm to del

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-01-21 12:11:45 -06:00
Tony M Lambert c3b398e48c Revert "Add Dependencies section to test Yaml and support to use them… (#773)
* Revert "Add Dependencies section to test Yaml and support to use them in the PS execution framework (#772)"

This reverts commit 511bb87af2.

* Generate docs from job=validate_atomics_generate_docs branch=revert-511bb87af29fb302dbd9e85bd93c2c00a47953ba
2020-01-09 09:12:38 -06:00
Carrie Roberts 511bb87af2 Add Dependencies section to test Yaml and support to use them in the PS execution framework (#772)
* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* lowercase url
2020-01-09 07:36:07 -07:00
JB 2f17ab1491 linux as supported_platform, not specific versions (depreciated) (#747)
-linux only (not specific distros)
-(this functionality is now depreciated by the *prereq_command* functionality in Invoke-AtomicTest)
-reworded section on 'manual tests' after seeing several manually tests today that have been easily automated

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2019-12-23 08:30:09 -07:00
Tony M Lambert 1dbda6cc37 ATT&CK JSON updated (#595) 2019-10-24 10:09:24 -07:00
Carrie Roberts c1d4e22313 update to describe new yaml elements (#563) 2019-09-13 15:46:09 -06:00
Carrie Roberts 95f2a5ed6f removing duplicate 'command' element from template (#550)
* removing duplicate 'command' element from template

* include TODO
2019-09-05 17:36:30 -06:00
Carrie Roberts b3978a03b4 markdown fix for manual tests (#544) 2019-09-03 09:20:59 -06:00
Carrie Roberts 3da3a89cf4 markdown fix (#541) 2019-09-03 07:35:52 -06:00
Carrie Roberts 019b63fdb5 Support for CheckPrereqs and Cleanup Commands (#531)
* Support for CheckPrereqs and Cleanup Commands

* for powershell executor, report prereqs are met if no prereq_commands are given

* remove invoke call from end of file, commited accidentally
2019-08-30 09:42:44 -06:00
Carrie Roberts 9f535f0547 add "elevation_required" attribute to test definition yaml (#532)
* add elevation_required attribute to test definition yaml

* Update atomic_red_team/atomic_test_template.yaml

Co-Authored-By: Brian Beyer <brianebeyer@users.noreply.github.com>

* Update atomics/T1089/T1089.yaml

Co-Authored-By: Brian Beyer <brianebeyer@users.noreply.github.com>

* Update atomics/T1089/T1089.yaml

Co-Authored-By: Brian Beyer <brianebeyer@users.noreply.github.com>
2019-08-29 16:18:07 -06:00
Tony M Lambert 7a25221960 Update ATT&CK json for technique creation (#488) 2019-05-06 10:15:22 -06:00
Tony M Lambert c68c20392b Update ATT&CK JSON (#406) 2018-11-14 13:59:04 -07:00
Brian Beyer 1deb39ba9a Validate command, input_arguments, and TODOs (#383)
* validate input args in command and vice versa

* validate the existence of TODOs

* Update T1002.yaml

* Update T1014.yaml

* Update T1022.yaml

* Fixed Issues Identified

Fixed multiple issues identified by branch in order to push merge
2018-10-22 13:10:51 -04:00
Brian Beyer f260d9f28c Fix contributing link (#270)
* Fix contributing link

* Generate docs from job=validate_atomics_generate_docs branch=fix-index-contributing-link
2018-06-23 09:42:29 -06:00
Brian Beyer 1116958431 follow Github naming convention 2018-06-12 08:58:22 -06:00
Brian Beyer ba8de7b6dd generate os specific indices and matrices (#187)
* generate os specifix indices and matrices

* Generate docs from job=validate_atomics_generate_docs branch=os-specific-matrices

* add newline

* Generate docs from job=validate_atomics_generate_docs branch=os-specific-matrices

* fix link
2018-05-24 07:40:54 -06:00
Brian Beyer bd06e5d051 fix link to creation page 2018-05-23 17:17:35 -06:00
Brian Beyer d97fdf5520 uppercase the Ts 2018-05-23 16:55:02 -06:00
Brian Beyer e0d0b72bb9 prettier display of supported platforms in markdown, a la ATT&CK 2018-05-23 14:12:11 -06:00
Brian Beyer c141e6253d tidy up the spacing around command lists 2018-05-21 20:54:00 +02:00
Brian Beyer c5871651d3 fix all the generated docs to properly show input_arguments table 2018-05-21 20:45:43 +02:00
Brian Beyer dec8946757 move the api files into an underscored directory to support the api/gem 2018-05-21 20:43:28 +02:00