security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,282 Commits 47 Branches 0 Tags
sysmon_fix
Commit Graph

6282 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Hare Sudhan 50435b5e1c update sysmon 2024-11-25 21:11:44 -08:00
dependabot[bot] daae6c4171 Bump typer from 0.13.0 to 0.13.1 (#2997) 
Bumps [typer](https://github.com/fastapi/typer) from 0.13.0 to 0.13.1.
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](https://github.com/fastapi/typer/compare/0.13.0...0.13.1)

---
updated-dependencies:
- dependency-name: typer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-25 22:04:19 -05:00
dependabot[bot] a6b2aaed44 Bump hypothesis from 6.119.3 to 6.119.4 (#2995) 
Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.119.3 to 6.119.4.
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/hypothesis-python-6.119.3...hypothesis-python-6.119.4)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-25 22:01:26 -05:00
Atomic Red Team doc generator 517da55ea7 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-20 21:13:28 +00:00
Burak Karaduman 7e90223bf7 New Atomic - Privilege Escalation via Docker Volume Mapping (#2992) 
* New Atomic - Privilege Escalation via Docker Volume Mapping

* Rearranged keys

---------

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-11-20 13:12:35 -08:00
Atomic Red Team doc generator 5eb9040c3c Generated docs from job=generate-docs branch=master [ci skip] 2024-11-20 20:22:26 +00:00
Kien Do ac78f1f902 Update T1078.004.yaml (#2991) 
Update cleanup section
 2024-11-20 12:21:22 -08:00
Atomic Red Team doc generator 7614a1937a Generated docs from job=generate-docs branch=master [ci skip] 2024-11-20 03:12:06 +00:00
Kien Do f2c4afb9e1 Update T1078.004.yaml (#2982) 
* Update T1078.004.md

Added comment noting that this T1078.004-2 will only work if the Azure account (that the command is trying to login with) does not have 2FA enabled.

* Update T1078.004.md

* Update T1078.004.yaml

Update T1078.004-2 so that core functionalities work again (regular execution, -GetPrereqs, and -CleanUp)

* Revert T1078.004.md changes

* Update terraform.tfvars

Hardcoded Azure values.

* Update T1078.004.yaml

Hardcoded test 2's values to match `./atomics/T1078.004/src/T1078.004-2/terraform.tfvars`

* Update terraform.tfvars

* Update T1078.004.yaml

---------

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-11-19 19:11:07 -08:00
Atomic Red Team doc generator 501dd6c05e Generated docs from job=generate-docs branch=master [ci skip] 2024-11-20 01:35:37 +00:00
Hare Sudhan 0efaba9ff0 update to MITRE ATT&CK 16 (#2990) 2024-11-19 20:34:41 -05:00
Atomic Red Team doc generator e1c3f63bf9 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-20 00:06:48 +00:00
Matt Anderson c7d7cc8203 Add tests to T1222 (#2980) 
* Add tests to T1222

* Update T1222.yaml

Remove Auto-gen GUIDs

* Update T1222.yaml

Fixed executor name for test 3 and removed colons in reg path causing errors in test 2.

---------

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-11-19 16:05:49 -08:00
Atomic Red Team doc generator f30d6050ca Generated docs from job=generate-docs branch=master [ci skip] 2024-11-19 18:17:02 +00:00
Burak Karaduman 33ca146f03 T1105 - Windows pull file using sftp.exe (#2987) 
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2024-11-19 13:16:05 -05:00
Atomic Red Team doc generator 12bf341353 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-19 18:10:36 +00:00
Burak Karaduman 0c76b2cad3 T1105 - Windows push file using sftp.exe (#2986) 
* T1105 - Windows push file using sftp.exe

* Update T1105.yaml

---------

Co-authored-by: Hare Sudhan <code@0x6c.dev>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2024-11-19 13:09:36 -05:00
Atomic Red Team doc generator d1430f6cb8 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-19 18:04:20 +00:00
Burak Karaduman 35b0abe836 T1105 - Windows pull file using scp.exe (#2985) 
* T1105 - Windows pull file using scp.exe

* Update T1105.yaml

---------

Co-authored-by: Hare Sudhan <code@0x6c.dev>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2024-11-19 13:03:15 -05:00
Atomic Red Team doc generator 012a309879 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-19 04:10:36 +00:00
Hare Sudhan 92f492c4d4 fix T1555 (#2989) 2024-11-18 20:09:43 -08:00
dependabot[bot] d622b54466 Bump hypothesis from 6.118.7 to 6.119.3 (#2988) 
Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.118.7 to 6.119.3.
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/hypothesis-python-6.118.7...hypothesis-python-6.119.3)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-18 21:34:52 -05:00
Atomic Red Team doc generator 2933afff6a Generated docs from job=generate-docs branch=master [ci skip] 2024-11-15 20:21:04 +00:00
Biagio Dipalma c6094b439c remove extra line (#2984) 
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-11-15 12:20:12 -08:00
Atomic Red Team doc generator fb37dd4a03 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-15 19:53:56 +00:00
Burak Karaduman 11648ff2bd T1105 - Windows push file using scp.exe (#2983) 
* T1105 - Windows push file using scp.exe

* Improvments for "Windows push file using scp.exe"

* Update T1105.yaml

---------

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-11-15 11:52:51 -08:00
Atomic Red Team doc generator 7e167eed39 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-15 19:47:03 +00:00
Michael Haag a4f082e118 RunMRU Atomic Test (#2981) 
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-11-15 11:46:11 -08:00
Atomic Red Team doc generator c78bb85e87 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-15 19:39:54 +00:00
Kevin e207ab6ff1 Move a T1036.003 test to T1036.007 (#2974) 
Signed-off-by: Kevin <kevin@stealsyour.pw>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-11-15 11:38:36 -08:00
Atomic Red Team doc generator 61c3a1408c Generated docs from job=generate-docs branch=master [ci skip] 2024-11-13 03:18:26 +00:00
Burak Karaduman 99915c63be Get Printer Device List via PowerShell Command (#2973) 2024-11-12 22:17:31 -05:00
Atomic Red Team doc generator 5d5915abe2 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-12 01:44:35 +00:00
Biagio Dipalma ff52ae4683 improve suite (#2964) 
Co-authored-by: Hare Sudhan <code@0x6c.dev>
 2024-11-11 20:43:41 -05:00
dependabot[bot] b760512280 Bump typer from 0.12.5 to 0.13.0 (#2978) 
Bumps [typer](https://github.com/fastapi/typer) from 0.12.5 to 0.13.0.
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](https://github.com/fastapi/typer/compare/0.12.5...0.13.0)

---
updated-dependencies:
- dependency-name: typer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-11 19:50:43 -05:00
dependabot[bot] 43f094e28e Bump hypothesis from 6.116.0 to 6.118.7 (#2979) 
Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.116.0 to 6.118.7.
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/hypothesis-python-6.116.0...hypothesis-python-6.118.7)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-11 19:48:05 -05:00
Atomic Red Team doc generator 25e3c3956c Generated docs from job=generate-docs branch=master [ci skip] 2024-11-05 21:12:26 +00:00
Burak Karaduman 67f47a078c New atomic added. (#2970) 
* New atomic added.

* Update T1082.yaml

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2024-11-05 16:11:26 -05:00
Atomic Red Team doc generator bb351c1480 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-05 21:03:53 +00:00
Burak Karaduman aa542159ab Added new atomic. (#2969) 
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2024-11-05 16:03:00 -05:00
Atomic Red Team doc generator 84a8d03003 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-05 21:01:27 +00:00
Ahmed Farouk 868da3b839 Added Paste and Run Technique (#2966) 
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2024-11-05 16:00:28 -05:00
Atomic Red Team doc generator f3ee3b833f Generated docs from job=generate-docs branch=master [ci skip] 2024-11-05 19:56:41 +00:00
Biagio Dipalma 26fbca688f Improve T1090.001 (#2963) 
* Improve test

* improvements

* handle error correctly

* remove escalation_required

* update test

---------

Co-authored-by: Hare Sudhan <code@0x6c.dev>
 2024-11-05 14:55:26 -05:00
dependabot[bot] e7246afdc8 Bump hypothesis from 6.115.5 to 6.116.0 (#2972) 
Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.115.5 to 6.116.0.
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/hypothesis-python-6.115.5...hypothesis-python-6.116.0)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-04 22:46:41 -05:00
dependabot[bot] 94ffb5972a Bump hypothesis from 6.115.3 to 6.115.5 (#2968) 2024-10-28 16:48:05 -04:00
Atomic Red Team doc generator 011d389fd6 Generated docs from job=generate-docs branch=master [ci skip] 2024-10-28 20:27:18 +00:00
Burak Karaduman 87085643f8 Added new atomic - T1518.001.yaml (#2965) 2024-10-28 13:26:16 -07:00
Atomic Red Team doc generator a9f4ffeb4f Generated docs from job=generate-docs branch=master [ci skip] 2024-10-25 00:22:17 +00:00
Burak Karaduman e701a4aa3e Create T1025.yaml (#2962) 
* Create T1025.yaml

* Update T1025.yaml

Edit command key structre.

---------

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
 2024-10-24 17:21:23 -07:00