Commit Graph

133 Commits

Author SHA1 Message Date
Atomic Red Team doc generator b3dc12d415 Generated docs from job=generate-docs branch=master [ci skip] 2025-11-05 01:55:34 +00:00
Atomic Red Team doc generator 0f41fdc8d4 Generated docs from job=generate-docs branch=master [ci skip] 2025-10-04 18:00:06 +00:00
Milad Cheraghi c87eab6a23 disable ASLR protection via sysctl (#3192)
Co-authored-by: Hare Sudhan <code@0x6c.dev>
2025-10-04 13:59:06 -04:00
Atomic Red Team doc generator 812ad23b22 Generated docs from job=generate-docs branch=master [ci skip] 2025-10-02 20:55:47 +00:00
wikijm aecf7ddca9 Update T1562.001.yaml - Adding Atomic Test - Freeze PPL-protected process with EDR-Freeze (#3191)
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2025-10-02 13:54:47 -07:00
Atomic Red Team doc generator 762f0548a1 Generated docs from job=generate-docs branch=master [ci skip] 2025-05-01 15:13:41 +00:00
Atomic Red Team doc generator 5ede8f21e4 Generated docs from job=generate-docs branch=master [ci skip] 2025-02-13 22:03:40 +00:00
Atomic Red Team doc generator d10a13eb17 Generated docs from job=generate-docs branch=master [ci skip] 2025-01-28 05:03:31 +00:00
Hare Sudhan bfdd702717 Remove unused variable (#3040) 2025-01-28 00:02:41 -05:00
Atomic Red Team doc generator 98513ccc8f Generated docs from job=generate-docs branch=master [ci skip] 2024-12-11 01:04:51 +00:00
Nasreddine Bencherchali dd77eab456 Autlogger Tampering Atomics (#3014)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2024-12-10 18:03:46 -07:00
Phil Hagen fd399bb6ed fix nesting and remove empty entries (#2825)
* fix nesting and remove empty entries

* missed an indent correction

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2024-07-03 16:31:05 -06:00
Atomic Red Team doc generator 0658d14d1d Generated docs from job=generate-docs branch=master [ci skip] 2024-06-13 22:08:58 +00:00
Alphonsa George 1cb761c5a0 Modified the Prereq_command of Test Unload Sysmon Filter Driver (#2807)
* Modified the Prereq_command of Test Unload Sysmon Filter Driver

* modified typo on the description

---------

Co-authored-by: alphonsa-01 <NA>
2024-06-13 17:07:09 -05:00
Atomic Red Team doc generator c816622770 Generated docs from job=generate-docs branch=master [ci skip] 2024-05-29 23:42:13 +00:00
NeuralGlitch fbe8663f49 Update T1562.001.yaml (#2788)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2024-05-29 18:40:55 -05:00
Atomic Red Team doc generator 86c88bc4d1 Generated docs from job=generate-docs branch=master [ci skip] 2024-02-09 14:59:36 +00:00
Atomic Red Team GUID generator 15e983365f Generate GUIDs from job=generate-docs branch=master [skip ci] 2024-02-09 14:59:20 +00:00
traceflow 50512fcc95 Adding ASR rules deletion (#2683)
* adding ASR rules deletion

* adding ASR rules deletion

* adding ASR rules deletion

* adding ASR rules deletion

* adding ASR rules deletion

* adding ASR rules deletion

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2024-02-09 08:58:45 -06:00
Atomic Red Team doc generator a79c9e0e82 Generated docs from job=generate-docs branch=master [ci skip] 2023-12-14 15:28:03 +00:00
BlueTeamOps 9ba4043595 ESXi ART Tests Batch 1 (#2635)
* ESXi Tests Batch 1

* remove duplicate key

* Update T1082.yaml

Updated the binary location to ExternalPayloads folder and also added the folder creation in GetPreReqs

* Update T1083.yaml

Added External Payloads and included folder creation in GetPreReqs

* Update T1129.yaml

Added ExternalPayloads refence. 
Added folder creation in GetPreReqs
Move the reference of the vib to src

* Update T1529.yaml

Added External Payloads folder and added folder creation step to GetPreReqs

* Update T1529.yaml

987c9b4d-a637-42db-b1cb-e9e242c3991b - added external payloads

* Update T1562.010.yaml

Added External Payloads reference and folder creation to GetPreReqs

* Moved the vib to src

* Delete atomics/T1129/bin directory

* Delete atomics/T1082/bin directory

* Delete atomics/T1083/bin directory

* Delete atomics/T1562.010/bin directory

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-12-14 08:27:13 -07:00
Atomic Red Team doc generator 5aec883ca4 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-17 17:32:58 +00:00
Atomic Red Team GUID generator ead225c103 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-11-17 17:32:43 +00:00
Swachchhanda Shrawan Poudel 2e802c737d Added new test that tampers with windows defender registry (#2599)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-11-17 09:32:08 -08:00
Atomic Red Team doc generator 157de65031 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-07 00:28:51 +00:00
Atomic Red Team doc generator ad2d7c8f13 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-06 22:42:54 +00:00
Hare Sudhan 62a85c12b5 FreeBSD changes (#2585)
* freebsd changes

* renaming freebsd to linux
2023-11-06 17:41:43 -05:00
Atomic Red Team doc generator 4d6c4e8e23 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-02 00:56:51 +00:00
Atomic Red Team GUID generator 16b5287208 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-11-02 00:56:30 +00:00
Jose Enrique Hernandez 2c1db3e4dd Merge branch 'master' into master 2023-11-01 19:10:13 -04:00
Atomic Red Team doc generator 4fe685f5f3 Generated docs from job=generate-docs branch=master [ci skip] 2023-10-27 16:16:19 +00:00
Atomic Red Team GUID generator af16bbdd70 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-10-27 16:16:00 +00:00
JeffMichelmore 7f6ffdcea2 Update T1562.001.yaml 2023-10-25 10:05:18 -05:00
JeffMichelmore 1a7b716021 Update T1562.001.yaml - Remove blank auto GUID
Remove blank auto GUID to resolve build error
2023-10-16 08:22:39 -05:00
JeffMichelmore 8cf4b2c606 Update T1562.001.yaml - Fixed Yaml formatting
Fixed yaml formatting issue
2023-10-14 10:36:43 -05:00
JeffMichelmore a186ec6a19 Update T1562.001.yaml
Adding new test for T1562.001 for disabling real-time protection on Linux and MacOS.
2023-10-13 17:05:10 -05:00
Atomic Red Team doc generator a228ee8656 Generated docs from job=generate-docs branch=master [ci skip] 2023-09-22 19:15:21 +00:00
Carrie Roberts d4709021fb Handle spaces in file paths (#2535)
* updating atomics count in README.md [ci skip]

* wip

* handle spaces in path

* update readme

* fix typo

---------

Co-authored-by: publish bot <opensource@redcanary.com>
2023-09-22 10:47:25 -06:00
Atomic Red Team doc generator 6af8c8fe51 Generated docs from job=generate-docs branch=master [ci skip] 2023-08-03 17:15:53 +00:00
Atomic Red Team GUID generator b928bdc3a3 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-08-03 17:15:35 +00:00
RedinDisguise ef1d5049ba Update T1562.001.yaml 2023-07-26 15:11:34 -04:00
Atomic Red Team doc generator 02cb591f75 Generated docs from job=generate-docs branch=master [ci skip] 2023-06-30 14:01:44 +00:00
Atomic Red Team GUID generator dfd1f98327 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-06-30 14:01:26 +00:00
Michael Haag 92e83732e6 AMSI COM 2023-06-30 07:55:02 -06:00
Atomic Red Team doc generator 84215139ee Generated docs from job=generate-docs branch=master [ci skip] 2023-06-15 16:29:11 +00:00
Carrie Roberts db1a2cf461 removing: Disable Defender with Defender Control (#2461) 2023-06-15 10:28:12 -06:00
Atomic Red Team doc generator cef46e4479 Generated docs from job=generate-docs branch=master [ci skip] 2023-06-15 16:17:12 +00:00
Carrie Roberts 068d32b1ea use ExternalPayloads directory (#2460)
* use ExternalPayloads directory

* use ExternalPayloads directory

* use ExternalPayloads directory
2023-06-15 10:16:12 -06:00
Alonso Cárdenas 3b8d0af302 Remove auto_generated_guid lines from new entries
Some other tiny modifications
2023-06-09 09:11:41 -05:00
Alonso Cárdenas 86913f3573 Merge branch 'master' of https://github.com/alonsobsd/atomic-red-team 2023-06-01 22:03:39 -05:00