a03d13c1ce
Merge branch 'master' into clr2of8-patch-19
2022-06-21 11:22:36 -04:00
1a4efda00e
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-21 15:22:06 +00:00
e8ef109fe3
Merge branch 'master' into clr2of8-patch-19
2022-06-21 11:19:27 -04:00
5734a4ce7b
Merge branch 'master' into patch-1
2022-06-21 10:08:16 -04:00
589c71ee12
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-21 14:08:13 +00:00
c006599f05
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-21 14:08:07 +00:00
df068ac8bd
Merge branch 'master' into 1056.001
2022-06-21 10:06:52 -04:00
9dd636838d
Merge branch 'master' into patch-1
2022-06-21 08:21:15 -05:00
91c7add074
add recurse/force flags to cleanup command
2022-06-20 16:03:58 -06:00
2f47a4c4f2
Added Reference in yaml
2022-06-17 10:05:33 -05:00
3d7ae73566
typo fix
2022-06-16 16:53:22 -06:00
819934cc3f
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-16 22:47:00 +00:00
4828b1d327
Merge branch 'master' into mitreApr2022
2022-06-16 16:38:42 -06:00
15270384cd
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-16 21:44:10 +00:00
49b1dec3c6
attempt to stop service first, in case its already running ( #2001 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-06-16 15:43:38 -06:00
17c9a64fee
recovered sct file from github history ( #2000 )
...
* Create T1218.003.sct
* Update T1218.003.inf
2022-06-16 14:41:09 -06:00
c27fe5e0ec
Merge branch 'master' into 1056.001
2022-06-16 14:52:46 -05:00
add51411df
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-16 19:24:52 +00:00
174e18402f
Update T1218.007.yaml ( #1999 )
2022-06-16 13:24:18 -06:00
97049fe2fc
Made requested changed
2022-06-16 10:38:03 -05:00
509e672bf4
Merge branch 'master' into patch-1
2022-06-15 20:55:35 -04:00
176bc88abf
Merge branch 'master' into 1056.001
2022-06-15 20:49:46 -04:00
165c26be6a
updates based mitre v11
2022-06-15 17:25:38 -06:00
5a14d96c37
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-15 21:35:21 +00:00
03e37456cd
moving atomics to correct T#
2022-06-15 15:30:42 -06:00
1d1ae02aa3
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-15 17:24:10 +00:00
d0a80fb9b4
adding t1547.003 ( #1996 )
...
* adding t1547.003
* fixing cleanup commands
2022-06-15 11:23:41 -06:00
307665de3b
Create T1530.yaml
2022-06-14 02:23:52 -05:00
9c3785a4ca
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-13 21:04:24 +00:00
148a5a235d
Adding T1546.015 Test 3 - COM Hijacking with RunDLL32 (Local Server Switch) ( #1992 )
...
* Update T1546.015.yaml
* Add files via upload
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-06-13 15:03:51 -06:00
a29128960f
Update T1059.006.yaml
2022-06-13 11:29:48 -05:00
3097dadca7
Update T1059.006.yaml
2022-06-13 11:26:40 -05:00
ee95f0c629
Update T1059.006 yaml - Python pty module and spawn function used to spawn sh or bash
...
-Zero-Day Exploitation of Atlassian Confluence [CVE-2022-26134] Unauthenticated RCE vulnerability - Critical severity
As per Volexity, bash shells were launched by the Confluence web application process. It had spawned a bash process which spawned a Python process that in turn spawned a bash shell.
Reference: https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/
2022-06-10 23:45:35 -05:00
c8b80f6fce
Add files via upload
2022-06-09 10:19:55 -05:00
9982660ef4
Delete MacOSKeylogger.swift
2022-06-09 10:19:39 -05:00
1bfc4dc6e3
Updated descriptions
2022-06-09 09:48:27 -05:00
58656a3f53
Merge branch 'redcanaryco:master' into 1056.001
2022-06-09 09:46:40 -05:00
25299b1e40
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-08 22:51:10 +00:00
d2cf4f16bb
Uploaded swift keylogging script
2022-06-08 10:13:51 -05:00
749c30e4b6
Added MacOS Test for T1056.001
2022-06-08 10:13:11 -05:00
40917c1a65
Moved c script
2022-06-07 10:36:26 -05:00
89c697c951
Merge branch 'master' into master
2022-06-04 23:05:22 -04:00
d8f1820ef6
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-04 00:04:19 +00:00
a768529778
Creates Schedule task with hidden attribute settings ( #1986 )
...
* Update T1112.yaml
* Update T1112.yaml
* typos
* Update T1087.002.yaml
* Update T1087.002.yaml
* Update T1087.002.yaml
* Add files via upload
* Update T1053_05_SCTASK_HIDDEN_ATTRIB.xml
* Update T1053.005.yaml
* Update T1053.005.yaml
* Update T1087.002.yaml
* Update T1087.002.yaml
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-06-03 18:03:49 -06:00
3d378b3924
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-03 22:48:12 +00:00
3ccb32ec78
WMI Persistence using ActiveScriptEventConsumer ( #1987 )
2022-06-03 16:47:47 -06:00
df67a8aa4d
Fixed not compiling
2022-06-03 10:23:25 -05:00
3e36aa671f
MacOS Dylib injection for T1574.006
...
reference: https://cedowens.medium.com/taking-esf-for-a-nother-spin-6e1e6acd1b74
2022-06-02 14:57:35 -05:00
7748526bd4
C file for opening calc
2022-06-02 14:56:00 -05:00
5b1111f223
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-01 20:32:51 +00:00
Jose Enrique Hernandez