Commit Graph

6538 Commits

Author SHA1 Message Date
Atomic Red Team doc generator f5564f54bf Generated docs from job=generate-docs branch=master [ci skip] 2023-05-25 13:26:28 +00:00
Atomic Red Team GUID generator 6b0a8417fd Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-25 13:26:11 +00:00
Paul 964c1296bd Update T1069.002.yaml (#2439) 2023-05-25 07:25:15 -06:00
Hare Sudhan e555d6e124 Merge branch 'master' into t1078_tf 2023-05-24 17:59:28 -04:00
Hare Sudhan b262c88ac8 minor bug fix for the validation and labels (#2438) 2023-05-24 11:08:41 -05:00
Hare Sudhan aef9160e90 fix tfvars 2023-05-24 01:29:41 -04:00
Hare Sudhan 24c923cc4f fix typo 2023-05-24 01:05:57 -04:00
Hare Sudhan 17859b19ef adding terraform prereqs 2023-05-24 00:33:17 -04:00
Atomic Red Team doc generator c3438e27b7 Generated docs from job=generate-docs branch=master [ci skip] 2023-05-23 14:13:38 +00:00
Hare Sudhan 47f54670b7 Merge pull request #2434 from clr2of8/1098-regex
fix regex issue
2023-05-23 10:12:48 -04:00
Hare Sudhan 34145f6ad2 Merge branch 'master' into 1098-regex 2023-05-23 10:06:08 -04:00
Atomic Red Team doc generator 1359912ccc Generated docs from job=generate-docs branch=master [ci skip] 2023-05-23 13:41:00 +00:00
Atomic Red Team GUID generator 9468bfc13a Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-23 13:40:42 +00:00
tccontre 215ead274f Update T1135.yaml - network share discovery via dir cmd (#2436)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-05-23 07:40:15 -06:00
dependabot[bot] 9751212d82 Bump requests from 2.30.0 to 2.31.0 (#2435)
Bumps [requests](https://github.com/psf/requests) from 2.30.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.30.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 07:36:37 -06:00
Atomic Red Team doc generator 7a75e19fb7 Generated docs from job=generate-docs branch=master [ci skip] 2023-05-23 02:49:16 +00:00
Atomic Red Team GUID generator bbc47aa361 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-23 02:48:59 +00:00
Hare Sudhan d14ba0aa18 Merge pull request #2428 from aranhams/patch-2
Add a new atomic test to T1560.001.yaml
2023-05-22 22:47:53 -04:00
clr2of8 0f2d35484f fix regex issue 2023-05-22 11:56:05 -06:00
BlueTeamOps 88e099fb7d Update T1562.008.yaml 2023-05-22 22:38:06 +10:00
Matheus Aranha c10aa03c2f fix: typo 2023-05-20 18:42:22 +02:00
Matheus Aranha 2e40537aaa fix: typo in file names, adding variables 2023-05-20 14:54:36 +02:00
Matheus Aranha fa94369982 fix: variable types 2023-05-20 01:26:01 +02:00
Matheus Aranha 02d7519ea3 fix: suggestions from comments added 2023-05-20 00:54:42 +02:00
Hare Sudhan 8044a8342d Merge branch 'master' into patch-2 2023-05-19 18:07:54 -04:00
Hare Sudhan ebdec5d757 Merge pull request #2430 from cyberbuff/auto-assign-labels
(enhancement) Auto assign labels and reviewers
2023-05-19 17:37:40 -04:00
Hare Sudhan b498741fa4 added auto assign code 2023-05-19 17:35:09 -04:00
Hare Sudhan b07f1125cf added auto assign code 2023-05-19 17:35:05 -04:00
Atomic Red Team doc generator 21509faf59 Generated docs from job=generate-docs branch=master [ci skip] 2023-05-19 17:13:28 +00:00
Atomic Red Team GUID generator 64f9f08766 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-19 17:13:07 +00:00
Nour Saffour 528c540e94 added T1505.005 technique (#2426)
* added T1505.005 technique

* include full technique name

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-05-19 11:12:19 -06:00
Atomic Red Team doc generator b1f3c968f2 Generated docs from job=generate-docs branch=master [ci skip] 2023-05-19 17:06:33 +00:00
Carrie Roberts 7955fa8daa update nav version and attack data (#2429) 2023-05-19 11:05:25 -06:00
Matheus Aranha 61f59e7541 Adding a new atomic test to T1560.001.yaml 2023-05-19 14:54:47 +02:00
Matheus Aranha 9bccf321f6 Add new atomic test to T1140.yaml
Adding new atomic test to T1140.
2023-05-19 14:43:45 +02:00
Atomic Red Team GUID generator 89b9c9c526 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-17 20:10:50 +00:00
Nour Saffour 80da053126 added T1070.008 to trigger alerts on file changes to the mail box (#2421)
* added T1070.008 to trigger alerts on file changes to the mail box

* updated command to use schtasks instead of the deprecated at.exe

* Update T1053.002.yaml

* Update T1053.002.yaml

* Update T1053.002.yaml

* Update T1053.002.yaml

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-05-17 14:10:00 -06:00
Atomic Red Team GUID generator 8037cadb4d Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-17 19:46:06 +00:00
Leo Verlod 7b7097d069 Adding T1219 Test 11 - MSP360 Connect Execution (#2420)
Thank you Leo!
2023-05-17 13:45:25 -06:00
Hare Sudhan a3ff1d8d40 validation fix (#2425) 2023-05-17 13:38:27 -06:00
Hare Sudhan e563055a69 (enhancement) CI validations (#2419)
* more validations added

* rename bin

* fnmatch fix
2023-05-15 09:36:19 -06:00
Josh Rickard 284886292b Atomic Red Team - JSON Schema Validation CI (#2303)
* feat: Adding atomic-red-team JSON Schema defintions

* feat: Adding validate.py script to validate all atomics against the defined schema

* feat: Adding validate-schema GitHub Workflow action to validate on every push to the repo

* ci: Updated the validate-schema workflow to support and use Ruby instead of python

* fix: Updated schema to remove schema draft version (not necessarily needed) and update to remove elevation_required as a required defined property

* fix: Removed the yaml schema version

* docs: Adding start of README

* fix: Adding an updated/better version of the python validation but may ultimately be removed

* feat: Adding Ruby version of validate.rb script

* fix: Removing files not needed since we are changing to github action and using the new validation code

* fix: Adding the yaml schema file back and removed the json version

* docs: Updated README with documentation

* fix: Updating schema to use new format validator

* fix: Updated validate.rb to verify that the Technique IDs are in the correct format.

* fix: Upating validate.rb to raise execptions so that failures flow up to the GitHub Action workflow

* fix: Updated all tests that have input_arguments not conformaing to schema defintion for type value of path

* fix: Updating the Validaton README for typos

* fixL: Minor updates to the schema

* minor schema changes

* github actions fix

* schema changes

---------

Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
Co-authored-by: Hare Sudhan <code@0x6c.dev>
2023-05-12 15:33:47 -06:00
Jiaxi ® 9a70b81004 fix: T1219 typo (#2417)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-05-11 15:25:07 -06:00
Atomic Red Team GUID generator 2a51677203 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-11 20:40:32 +00:00
Paul dd810e48ca Merge pull request #2418 from redcanaryco/snake-malware
Snake Malware Atomic Tests
2023-05-11 16:39:50 -04:00
Michael Haag 1ebcb346f6 Snake Malware Atomic Tests 2023-05-11 12:40:31 -06:00
Atomic Red Team GUID generator 4177d016ad Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-05-09 19:38:56 +00:00
Michael Haag 7b2ba6e0ac modify BootExecute (#2412)
* modify BootExecute

* Update T1547.001.yaml

* Update T1547.001.yaml

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-05-09 13:38:16 -06:00
Alonso Cárdenas baf012d844 Fix conflicts 2023-05-09 13:00:05 -05:00
Alonso Cárdenas 896859a15f Fix conflicts 2023-05-09 12:57:04 -05:00