security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,538 Commits 47 Branches 0 Tags
python_conversion
Commit Graph

5173 Commits

Author SHA1 Message Date
CircleCI Atomic Red Team doc generator 5148bb998c Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-07 03:39:44 +00:00
CircleCI Atomic Red Team GUID generator cd3087fa78 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-07 03:39:39 +00:00
inc0gnit0 ee6707aadb Added T1053.006 - Blackbot Inc. (#1412) 
* Added T1053.006 - Raymond

* Update T1053.006.yaml

* Update used_guids.txt

Co-authored-by: ryang <ryang@blackbot.io>
 2021-04-06 21:39:25 -06:00
CircleCI Atomic Red Team doc generator 8035973916 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 14:18:48 +00:00
CircleCI Atomic Red Team GUID generator afb9b9cc33 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 14:18:43 +00:00
tlor89 0c9a8d403e Merge branch 'master' into T1070.003_Update 2021-04-02 09:12:26 -05:00
tlor89 a2395663c0 Update for Disable Bash History Logging with SSH -T Atomic 
Made the following changes for -T for the command and resolved supported platform to linux
 2021-04-02 09:07:57 -05:00
tlor89 08b98f2556 Update T1070.003.yaml 2021-04-02 09:03:48 -05:00
CircleCI Atomic Red Team doc generator ea98ba6b7a Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 13:30:11 +00:00
CircleCI Atomic Red Team GUID generator 76a1c0f4bc Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 13:30:06 +00:00
tlor89 f4bdccc905 t1564-update (#1411) 
Co-authored-by: Toua Lor <tlor@nti.local>
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
 2021-04-02 07:29:46 -06:00
CircleCI Atomic Red Team doc generator 228dcb1ae3 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 13:28:54 +00:00
Carrie Roberts 8b6c9af427 add usebasicparsing flag (#1410) 2021-04-02 07:28:29 -06:00
CircleCI Atomic Red Team doc generator 180623c8ab Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-01 16:50:55 +00:00
CircleCI Atomic Red Team doc generator bc17626d85 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-24 18:39:14 +00:00
Adam Mashinchi f2cb520542 Remove ARTifacts directory (#1408) 
* Update 1547.001 with link to stable "ARTifact" URL

Creating static link for Discovery.bat as "ARTifacts" directory is slated for removal.

* Update 1547.001.md to reflect YAML change

* Delete ARTifacts directory

Legacy URL available here: https://github.com/redcanaryco/atomic-red-team/tree/e88a1ea463964839e267dba74ec1cf7bf634ccbf/ARTifacts
 2021-03-24 12:38:00 -06:00
CircleCI Atomic Red Team doc generator 058b5c2423 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-22 15:39:07 +00:00
Matt Graeber 92026b8e3c Moving Invoke-Mimikatz test to T1003.001 (#1407) 2021-03-22 09:38:35 -06:00
CircleCI Atomic Red Team doc generator 396ea73b70 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-13 14:24:38 +00:00
CircleCI Atomic Red Team GUID generator 4803288632 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-13 14:24:31 +00:00
Matt Graeber 80415a586f Moving mavinject test to T1055.001 and src cleanup #1404 (#1405) 
* Moving mavinject test to T1055.001 and src cleanup #1404

* Adding Windows Command Prompt test

* Adding rundll32.exe test

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-03-13 07:22:36 -07:00
CircleCI Atomic Red Team doc generator a574666190 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-10 14:55:55 +00:00
Carrie Roberts 4031861550 add quotes to fix command execution (#1401) 
Thank you @aky1286 and Issue #1400
 2021-03-10 07:55:23 -07:00
CircleCI Atomic Red Team doc generator 974e2eb8b6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-10 04:09:43 +00:00
Clément Notin 2221b0715b T1055: psexec "-s" is not required (#1402) 
Since the user is admin the debug privilege is automatically obtained when necessary for the injection
The TTP is also clearer because mimikatz runs as the current user (used for psexec) and not as SYSTEM
 2021-03-09 21:09:09 -07:00
CircleCI Atomic Red Team doc generator 2fd6408411 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-06 04:06:46 +00:00
Yaakov Saxon 32af0f1aba Merge pull request #1 from YSaxon/patch-2 
Update T1087.001.md
 2021-03-04 14:32:14 -05:00
Yaakov Saxon 7ed9ed1a3e Update T1087.001.md 2021-03-04 14:31:19 -05:00
Yaakov Saxon 9cf7f56150 remove macOS from /etc/passwd test 
macOS has an /etc/passwd file, but it doesn't actually use it under normal circumstances and user accounts are not listed there (it's just a standard default file that never changes)

As the header for the file states: 
# Note that this file is consulted directly only when the system is running
# in single-user mode.  At other times this information is provided by
# Open Directory.
 2021-03-04 14:19:29 -05:00
CircleCI Atomic Red Team doc generator 7f6de4f651 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-01 17:33:15 +00:00
CircleCI Atomic Red Team GUID generator 8d93e1c859 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-01 17:33:08 +00:00
Carl 1dd81b1687 Merge branch 'master' into patch-33 2021-03-01 10:29:07 -07:00
CircleCI Atomic Red Team doc generator 07b61288d6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-26 15:49:41 +00:00
CircleCI Atomic Red Team GUID generator 493c343724 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-26 15:49:35 +00:00
BlueTeamOps b91312451f Added auditpol based config clear atomics (#1392) 
* Added auditpol based config clear atomics

Included remove and clear switches for auditpol based logging impairment.

* add warning statement

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-02-26 08:49:14 -07:00
CircleCI Atomic Red Team doc generator 9ccb1da335 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-24 02:33:41 +00:00
Alex Jackson b1505aa7da Fix broken link (#1397) 2021-02-23 19:33:15 -07:00
CircleCI Atomic Red Team doc generator 8b527927b5 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-18 15:58:10 +00:00
McNulty 645cb4edcd Update T1485.yaml (#1395) 
Let the file which will be deleted be more dynamic to allow users to define thier own using an input argument

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-02-18 08:57:41 -07:00
Brian Thacker 7e974e12f2 Update qakbot.bat (#1393) 
Updated qakbot recon command list as reported by DFIR Reports: https://twitter.com/TheDFIRReport/status/1361331598344478727

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-02-18 08:52:00 -07:00
CircleCI Atomic Red Team doc generator 95e6b573e7 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-17 18:19:25 +00:00
Carrie Roberts ac04c34c4a Create file to delete as part of attack cmds (#1394) 
* Create file to delete as part of attack cmds

* remove sample test
 2021-02-17 18:19:00 +00:00
CircleCI Atomic Red Team doc generator 881e46997b Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-11 20:47:58 +00:00
CircleCI Atomic Red Team GUID generator 8ba4d67987 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-11 20:47:50 +00:00
Alain Homewood 6573d40801 Added test for T1137.004 to test Outlook Home Page persistence and pa… (#1381) 
* Added test for T1137.004 to test Outlook Home Page persistence and payload execution

* Fix ATT&CK technique numbers

Co-authored-by: inzlain <inzlain@localhost>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-02-11 13:47:27 -07:00
CircleCI Atomic Red Team doc generator 43bda07d49 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-11 17:19:00 +00:00
CircleCI Atomic Red Team GUID generator 17639d4d95 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-11 17:18:52 +00:00
Jonhnathan 57b1728731 Update T1136.002.yaml (#1384) 
* Update T1136.002.yaml

* Adds default values, remove guid

* remove auto_generated_guid line

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-02-11 10:18:38 -07:00
CircleCI Atomic Red Team doc generator ac3c47befe Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-02-11 16:17:23 +00:00
Michael Haag 6f91baab5c Update T1553.004.yaml (#1386) 
Fixed test as it was not working

Co-authored-by: mhaag-spl <76067280+mhaag-spl@users.noreply.github.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-02-11 09:16:41 -07:00