Commit Graph

30 Commits

Author SHA1 Message Date
Atomic Red Team doc generator 9f6a1eab36 Generated docs from job=generate-docs branch=master [ci skip] 2026-02-18 16:55:45 +00:00
Atomic Red Team doc generator 376bf2a64d Generated docs from job=generate-docs branch=master [ci skip] 2026-02-18 16:46:29 +00:00
Atomic Red Team doc generator 5ede8f21e4 Generated docs from job=generate-docs branch=master [ci skip] 2025-02-13 22:03:40 +00:00
Atomic Red Team doc generator a228ee8656 Generated docs from job=generate-docs branch=master [ci skip] 2023-09-22 19:15:21 +00:00
Carrie Roberts d4709021fb Handle spaces in file paths (#2535)
* updating atomics count in README.md [ci skip]

* wip

* handle spaces in path

* update readme

* fix typo

---------

Co-authored-by: publish bot <opensource@redcanary.com>
2023-09-22 10:47:25 -06:00
Atomic Red Team doc generator ca7374abdb Generated docs from job=generate-docs branch=master [ci skip] 2023-08-15 01:05:57 +00:00
Atomic Red Team GUID generator b472e5f639 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-08-15 01:05:39 +00:00
CyberBilly7 a82678a616 Update T1564.yaml (#2510)
NirCmd is used by threat actors to execute commands, which can include recon and privilege escalation via running commands via the SYSTEM account

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-08-14 19:04:57 -06:00
Atomic Red Team doc generator 62307f5d7b Generated docs from job=generate-docs branch=master [ci skip] 2023-03-20 15:12:10 +00:00
Paul f0a94f763b Update T1564.yaml (#2379) 2023-03-20 09:07:47 -06:00
Atomic Red Team doc generator 16594d72c5 Generated docs from job=generate-docs branch=master [ci skip] 2023-02-13 23:11:19 +00:00
Josh Rickard a5dd0813cd fix: Updating atomics YAML file structure to align with the new JSON schema definition (#2323)
* fix: Updating atomics YAML file structure to align with the new JSON schema definition.

This also fixes some white space issues and general line formatting across all impacted atomics.

* fix: One additional change needed

---------

Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2023-02-13 16:10:37 -07:00
Atomic Red Team doc generator 3927202872 Generated docs from job=generate-docs branch=master [ci skip] 2022-10-20 21:47:35 +00:00
Atomic Red Team GUID generator 80be4123cd Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-10-20 21:47:29 +00:00
Michael Haag 0d4622f4e8 Update T1564.yaml (#2198) 2022-10-20 15:46:58 -06:00
CircleCI Atomic Red Team doc generator 1e024d99ea Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-07-02 12:38:23 +00:00
Carrie Roberts c0e5117730 moving invoke-maldoc into art repo 2021-07-01 20:11:10 -06:00
CircleCI Atomic Red Team doc generator 36d49de4c8 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 17:04:33 +00:00
CircleCI Atomic Red Team doc generator 575b36a8e6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 15:16:54 +00:00
CircleCI Atomic Red Team doc generator 7e428d79d0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-16 21:38:51 +00:00
Carrie Roberts 388f671d93 name update (#1521)
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
2021-06-16 15:38:19 -06:00
CircleCI Atomic Red Team doc generator 88ad3fd322 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-16 18:41:22 +00:00
SecurityShrimp 42799b033d added TLS/SSL v1.2 enabling commands to any atomic test utilizing IWR (#1519)
* Update T1204.002.md

Added lines to each test using IWR for invoke-webrequest to set the acceptable TLS versions for the commands to complete successfully by prepending the tests with 

```[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12```

* Update T1555.yaml

added line to set ssl/tls version

* Update T1134.001.yaml

updated IWR lines to allow ssl/tls version 1.2

* Update T1069.002.yaml

added lines to every IWR instance to set ssl/tls version to 1.2

* Update T1558.003.yaml

added line to allow TLS/SSL 1.2

* Update T1033.yaml

added command to enable SSL/TLS v1.2

* Update T1055.012.yaml

added command to enable TLS/SSL v1.2

* Update T1115.yaml

Added command to enable SSL/TLS v1.2

* Update T1070.001.yaml

added command enabling SSL/TLS v 1.2

* Update T1564.yaml

added commands to enable SSL/TLS v 1.2

* Update T1566.001.yaml

added command to enable SSL/TLS V1.2

* Update T1135.yaml

added command to enable SSL/TLS v1.2

* Update T1055.yaml

added commands to enable TLS/SSL v 1.2

* Update T1110.003.yaml

added command to enable TLS/SSL v1.2

* Update T1003.yaml

Added command to enable TLS/SSL v1.2

* Update T1053.005.yaml

added command to enable TLS/SSL v1.2

* Update T1003.001.yaml

added commands to enable TLS/SSL v1.2 for any command using invoke-webrequest

* Update T1069.002.yaml

syntax correction

* Update T1134.001.yaml

syntax correction

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2021-06-16 12:41:04 -06:00
CircleCI Atomic Red Team doc generator ea98ba6b7a Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 13:30:11 +00:00
CircleCI Atomic Red Team GUID generator 76a1c0f4bc Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 13:30:06 +00:00
tlor89 f4bdccc905 t1564-update (#1411)
Co-authored-by: Toua Lor <tlor@nti.local>
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
2021-04-02 07:29:46 -06:00
CircleCI Atomic Red Team doc generator 228dcb1ae3 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 13:28:54 +00:00
Carrie Roberts 8b6c9af427 add usebasicparsing flag (#1410) 2021-04-02 07:28:29 -06:00
Brian Beyer 7ebf7536b8 Separate CI steps so Github status checks can reference the right checks (#1334)
* Separate CI steps so Github status checks can reference the right checks

* Generate docs from job=generate_docs branch=bb-separate-ci-steps

* Commit GUIDs after generating; require GUIDs before other steps

* Fix config

* Generate GUIDs from job=generate_guids branch=bb-separate-ci-steps

* Generate docs from job=generate_docs branch=bb-separate-ci-steps

* Better wording

* Update config.yml

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-12-16 11:27:51 -07:00
Ama Smuggle Avocados 78507aedce Extractbinary (#1332)
* initial

* moving file

* hard-code to winword process

Co-authored-by: avocado <avocados@smuggler.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-12-16 08:46:56 -07:00