1d16e91c58
Generated docs from job=generate-docs branch=master [ci skip]
2025-03-10 21:59:13 +00:00
82b75e07e4
feat: Add T1046-12 ( #3074 )
...
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com >
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2025-03-10 17:58:19 -04:00
45db9f2d89
T1046 - added csv option to ip_address parameter to test number 10 ( #3047 )
2025-02-05 13:51:06 -05:00
bfdd702717
Remove unused variable ( #3040 )
2025-01-28 00:02:41 -05:00
8e18cafebb
Fix 1046.yaml ( #2892 )
...
* Adding the --rm option in the docker run command
* Fix the docker exec command
* Added the dockerfile path as input arg
* Fixing the reference to the dockerfile filepath
---------
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com >
2024-08-02 14:43:58 -07:00
f8df955af0
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-18 18:10:56 +00:00
f205476bf7
Update T1046.yaml ( #2802 )
...
added new test
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-06-18 13:09:50 -05:00
edea906548
Implementation of venv into Windows Python atomics ( #2703 )
...
* Improve pip handling (#1 )
* virtual env added to T1018, tested and confirmed working
* virtual env added to T1003.001, tested and confirmed working
* virtual env added to T1555.003, tested and confirmed working
* Removing pip-autoremove installation as not required
* updating atomics count in README.md [ci skip]
---------
Co-authored-by: Hare Sudhan <code@0x6c.dev >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
Co-authored-by: publish bot <opensource@redcanary.com >
2024-02-26 09:19:26 -06:00
a4653ac9b5
Updating get_prereq_command to download and install python3 & pip ( #2680 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-02-08 15:28:39 -06:00
7dfdc97d79
FreeBSD Cleanup ( #2603 )
...
* FreeBSD Cleanup
* cleanup
* fix t1016
* reducing multiline if else to single line
* fix t1037.003
* ignore T1003.007
* fix t1003.007
* more fixes
2023-11-13 16:45:43 -05:00
62a85c12b5
FreeBSD changes ( #2585 )
...
* freebsd changes
* renaming freebsd to linux
2023-11-06 17:41:43 -05:00
16b5287208
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-02 00:56:30 +00:00
2c1db3e4dd
Merge branch 'master' into master
2023-11-01 19:10:13 -04:00
d4709021fb
Handle spaces in file paths ( #2535 )
...
* updating atomics count in README.md [ci skip]
* wip
* handle spaces in path
* update readme
* fix typo
---------
Co-authored-by: publish bot <opensource@redcanary.com >
2023-09-22 10:47:25 -06:00
363cf9a301
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-08-02 03:23:54 +00:00
6b7458f211
Add new test "Port-Scanning /24 Subnet with PowerShell" ( #2491 )
...
* Add new test "Port-Scanning /24 Subnet with PowerShell"
Test uses built-in Windows features for portscanning.
* Update T1046.yaml
* typo fix
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-07-31 10:26:49 -06:00
068d32b1ea
use ExternalPayloads directory ( #2460 )
...
* use ExternalPayloads directory
* use ExternalPayloads directory
* use ExternalPayloads directory
2023-06-15 10:16:12 -06:00
3b8d0af302
Remove auto_generated_guid lines from new entries
...
Some other tiny modifications
2023-06-09 09:11:41 -05:00
97cd6fc8fe
- Add freebsd test
2023-06-01 22:10:20 -05:00
86913f3573
Merge branch 'master' of https://github.com/alonsobsd/atomic-red-team
2023-06-01 22:03:39 -05:00
c960254da1
Try to fix conflicts
2023-06-01 21:06:47 -05:00
b26e90f980
Fix conflicts
2023-06-01 21:01:04 -05:00
65294196d0
Spelling adjustments ( #2448 )
...
Looking over the YAMLs mostly, only changes for readability or accuracy
2023-05-31 15:50:22 -05:00
f1c5a9be03
Add FreeBSD support
2023-05-08 11:06:08 -05:00
38d64a4f75
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-04-13 19:43:11 +00:00
01c6ddd975
Update T1046.yaml
2023-04-12 13:57:10 -07:00
4d4c9d5b15
Adding tests for containers - yaml changed
...
Added test for the containers
Made changes in the yaml file to incorporate containers as platforms
2023-03-17 19:31:44 -07:00
0773daad12
Revert "Add files via upload"
2023-03-17 18:34:12 -07:00
1347a1a8f5
Add files via upload
2023-03-17 18:17:14 -07:00
a5dd0813cd
fix: Updating atomics YAML file structure to align with the new JSON schema definition ( #2323 )
...
* fix: Updating atomics YAML file structure to align with the new JSON schema definition.
This also fixes some white space issues and general line formatting across all impacted atomics.
* fix: One additional change needed
---------
Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-02-13 16:10:37 -07:00
38fd567a88
Updates to T1046-1,2 ( #2022 )
...
Updates to T1046 Test 1 and 2
2022-07-02 21:13:20 -06:00
3022fe0666
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-05-08 02:02:15 +00:00
f567ca01a1
T1046 - Added Service Scanning tests sourced from WinPwn script. ( #1930 )
...
* Added Service Scanning tests sourced from WinPwn script.
Details:
https://github.com/S3cur3Th1sSh1t/WinPwn/
Testing:
Tested on Windows 10 VM
* make timeout comment generic to all execution frameworks.
* typo
Co-authored-by: dwhite9 <d0w019h@wal-mart.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-05-07 20:01:47 -06:00
ef2792b098
T1046 2 fix prerequisites ( #1781 )
...
* T1046-2: set elevation_required: true
* T1046-2: add netcat prerequisite
* T1046-2: add telnet prerequisite
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-02-17 11:54:29 -07:00
a83e73fbe4
adds prereq for lsof/T1087.001, fixes other broken prereq cmds ( #1774 )
...
- several instances of: `yum -y epel-release rsyslog` missing an `install`
- adds dependency for lsof
2022-02-10 07:39:32 -07:00
4a5881e343
Linux prereq updates ( #1673 )
...
* T1070.003-9 update (get_)prereq_commmand
- moved system changes to the get_prereq(s)
- ubuntu `passwd` didn't accept `--stdin`
- updated get_prereqs for both ubuntu/centos
* T1016 - update prereq
* T1018 - update prereq
* T1562.001 - update rsyslog prereq
* T1560.001 updates dep check/install, update default likely to exist
switch to /var/log/wtmp and /var/log/btmp vs ${HOME}/*.txt, since those will
always be present
tests for zip in the prereq
adds deb/rpm install for zip
* T1486 - update getprereqs
* T1135 - update prereqs
* T1046 - update prereqs
* T1040 - update prereqs
2021-11-19 11:42:46 -07:00
1513717eb2
Updating atomics to conform to standard ( #1619 )
...
* Updated format of input_argument types for Url
* Updated type for input_arguments to Url (missed)
* Updating Path type for input_arguments
* Updated String type for input_arguments
* Missed a few Strings and Url types
* Updated default values for input_arguments to align with their types
* Updated Integer type for input_arguments
* Updated formatting and spacing of atomics
2021-09-03 18:20:46 -06:00
e909621a57
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-04-27 22:21:19 +00:00
6954425558
Update T1046.yaml ( #1436 )
...
* Update T1046.yaml
* Create T1046.py
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-04-27 16:20:51 -06:00
85f4f0ec3f
fixed prereq_command ( #1205 )
...
Co-authored-by: Harrell <LHarrell@nti.local >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-08-20 14:37:47 -06:00
e99213cfa6
configurable host to scan ( #1148 )
2020-07-20 17:23:24 -06:00
f59bb10f9f
Generate docs from job=validate_atomics_generate_docs branch=master
2020-07-17 23:52:22 +00:00
7c4a0fd25e
T1046 Test 3 Nmap Port Scan from Windows ( #1133 )
...
* Update to fix dependency issues
* Update to fix dependency issues
* optimized code
Co-authored-by: Ben Bucao <bbucao@nti.local >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-07-17 17:51:56 -06:00
e3dba0cbe2
Pre Req issue fix. ( #1072 )
...
* Check Prereqs error fix
* Check Prereqs error fix in T1046.
* Prereq issue fix.
* Attack command issue fix.
* Extra backslash removed
2020-06-19 16:20:06 -06:00
24549e3866
Convert to Mitre ATT&CK sub-technique schema ( #1056 )
...
* Initial transfer of atomics to MITRE subtechniques
* Add GUIDs back in, attack_technique to string (#1019 )
* technique to string and add guids back in
* technique to string and add guids back in
* technique to string and add guids back in
* technique to string and add guids back in
* Subtechnique transfer T1220-T1546.005 (#1020 )
* Create T1222.001.yaml
* Create T1222.002.yaml
* Create T1505.002.yaml
* Update T1543.003.yaml
* Update AtomicService.cs
* Update T1546.005.yaml
* Delete T1222.yaml
* Update T1482.yaml
* Update T1485.yaml
* Update T1220.yaml
* Update T1489.yaml
* Update T1490.yaml
* Update T1496.yaml
* Update T1505.003.yaml
* Update T1505.yaml
* Update T1518.001.yaml
* Update T1518.yaml
* Update T1529.yaml
* Update T1543.004.yaml
* Update T1546.001.yaml
* Update T1546.002.yaml
* Update T1546.002.yaml
* Update T1546.001.yaml
* Update T1543.004.yaml
* Update T1543.002.yaml
* Update T1543.001.yaml
* Update T1518.001.yaml
* Update T1546.004.yaml
* Update T1546.003.yaml
* Update T1531.yaml
* Update T1222.001.yaml
* Update T1222.002.yaml
* Update T1505.002.yaml
* Update T1505.003.yaml
* Update T1518.001.yaml
* Update T1543.001.yaml
* Update T1546.005.yaml
* Update T1546.004.yaml
* Update T1546.003.yaml
* Update T1546.002.yaml
* Update T1546.001.yaml
* Update T1543.004.yaml
* Update T1543.003.yaml
* Update T1543.002.yaml
* added auto_generated_guid 1220
* added T1222.001 auto_generated_guid
* Update T1222.002.yaml
added auto_generated_guid entries
* Update T1482.yaml
auto_generated_guid added
* Update T1485.yaml
added auto_generated_guids
* Update T1489.yaml
added auto_generated_guids
* Update T1490.yaml
added auto_generated_guids
* Update T1496.yaml
added auto_generated_guid
* Update T1505.002.yaml
added auto_generated_guid from old T1505 same atomic
* Update T1505.003.yaml
added auto_generated_guid from previous atomic 1100
* Delete T1505.yaml
no longer needed, moved to 1505.002
* Update T1518.yaml
added auto_generated_guids
* Update T1529.yaml
added auto_generated_guids
* Update T1531.yaml
added auto_generated_guids
* Update T1543.001.yaml
added auto_generated_guid
* Update T1543.002.yaml
added auto_generated_guid
* Update T1543.004.yaml
added auto_generated_guid
* Update T1546.001.yaml
added auto_generated_guid
* Update T1546.002.yaml
added auto_generated_guid
* Update T1546.003.yaml
* Update T1546.004.yaml
added auto_generated_guid
* Update T1546.005.yaml
added auto_generated_guid
* add guids back in
* fix spacing issue
* fix spacing
* fix spacing
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
* Sub-techniques T1053-T1113 - Updates (#1022 )
* Sub-techniques T1053-T1113 - Updates
Updated techniques for sub-techniques.
* minor fixes
format fixing
* Added GUIDs
- Added GUIDs back
- Fixed typo (T1054)
- Fixed attack_technique from an array to a string
* Sub-technique updates T1546.008 through T1574.011 (#1024 )
* sub technique updates
* sub technique updates
* sub technique updates
* Carrie updates (#1017 )
* updated T1110,12,13
* updated T1114
* updated T1114
* updated T1115
* updated T1119
* updated T1123,24
* updated T1127
* updated T1114
* updated T1127
* updated T1132
* T1134.004
* T1134.004
* updated T1135
* updated T1136
* updated T1137
* updated T1140
* remove depracted T1153
* updated T1176
* updated T1197
* updated T1201
* updated T1202
* updated T1204
* updated T1207
* updated T1216
* updated T1204
* updated T1217
* updated T1218
* updated T1218
* updated T1219
* updated T1218
* attack_technique to string
* Subtechnique transfer (#1025 )
* T1003 review
* T1005 manual review changes
* T1027.002 sub-technique review
* T1027.004 sub-technique review
* T1036 sub-technique review
* T1037 sub-technique review
* T1048 sub-technique review
* YAML bugfixes
* Adding auto-generated GUIDs back to tests
* merging with Mike's PR
* Merging with Carrie's PR
* fix spacing
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
* Subtechnique fix (#1026 )
* add atomic_tests: element
* add atomic_tests: element
* more fixes
* more fixes
* more fixes
* sub technique minor fixes 1 (#1027 )
* fixes
* fixes
* more fixes
* more fixes
* display name fix (#1028 )
* remove some deprecated stuff. reorganize a little (#1031 )
* Gendocs fix (#1033 )
* gendocs updates for subtechniques
* add folders
* ignore auto generated markdown files
* remove tmp files
* add tmp files
* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer
* navigator layer v3.0
* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer
Co-authored-by: Matt Graeber <60448025+mgraeber-rc@users.noreply.github.com >
Co-authored-by: Tsora-Pop <35981510+Tsora-Pop@users.noreply.github.com >
Co-authored-by: Michael Haag <mike@redcanary.com >
Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-06-17 12:55:46 -06:00
35c42f2c61
Generate docs from job=validate_atomics_generate_docs branch=master
2020-05-15 17:19:25 +00:00
7d63609ea3
Added dependencies and fixed tests for linux and macOS ( #973 )
...
* Added dependencies and fixed tests
* Added description to dependencies.
* Executable presence checked in dependencies
Co-authored-by: hypnoticpattern <>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-05-06 10:22:48 -06:00
ab0b391ac0
Updated Descriptions ( #899 )
...
* Updated Descriptions
Batch of description updates to assist with understand what a test will do.
* Update T1055.yaml
* Update T1055.yaml
Trying to fix this...
* Update T1055.yaml
fixing again
* Update T1055.yaml
* spacing fix
* Generate docs from job=validate_atomics_generate_docs branch=descriptions
* wording updates
* Generate docs from job=validate_atomics_generate_docs branch=descriptions
* remove cmd.exe /c prefix
* Generate docs from job=validate_atomics_generate_docs branch=descriptions
* wording update
* Generate docs from job=validate_atomics_generate_docs branch=descriptions
* add back tick
* Generate docs from job=validate_atomics_generate_docs branch=descriptions
* hashtag stuff
* Generate docs from job=validate_atomics_generate_docs branch=descriptions
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-03-20 16:48:58 -06:00
1bfefdacfc
Add elevated ( #542 )
...
* provide elevation_required attribute
* provide elevation_required attribute
* provide elevation_required attribute
2019-09-03 07:34:42 -06:00
16e48bb1b0
Added additional Port Scanning options and cleaned up existing.
2018-07-02 20:50:37 -05:00
Atomic Red Team doc generator
