04d129a08c
minor change
2022-04-29 12:44:51 -04:00
c4b6a04182
Empty-Commit
2022-04-29 12:35:00 -04:00
8c3b3277a6
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:42:41 +00:00
531dc622ef
T1555.003 Test 8 Add python prereq ( #1883 )
...
* Add python prereq
* typo fix
Co-authored-by: Jose Enrique Hernandez <josehelps@gmail.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:42:11 -06:00
ab5e560865
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:38:56 +00:00
3b7d1a9d19
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-28 01:38:52 +00:00
da3488b3b7
Added Invoke-WMIExec Pass the Hash ( #1896 )
...
* Added Invoke-WMIExec Pass the Hash
* Update T1550.002.yaml
Updated with permanent link
Co-authored-by: Richard Kelley <richard.kelley@qomplx.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:38:25 -06:00
b194729422
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:37:14 +00:00
22cfe0ad49
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-28 01:37:10 +00:00
e51a12089e
Added Crafting Active Directory silver tickets with mimikatz ( #1897 )
...
* Added Crafting Active Directory silver tickets with mimikatz
* Update T1558.002.yaml
Co-authored-by: Richard Kelley <richard.kelley@qomplx.com >
Co-authored-by: Jose Enrique Hernandez <josehelps@gmail.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:36:42 -06:00
667cfa7daa
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:34:38 +00:00
96fb67db9f
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-28 01:34:33 +00:00
0edf9b8609
Added Injection SID-History with mimikatz ( #1898 )
...
* Added Injection SID-History with mimikatz
* Update T1134.005.yaml
Changed elevation_required to true
* remove guid
Co-authored-by: Richard Kelley <richard.kelley@qomplx.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:34:07 -06:00
dd97f407ad
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:22:28 +00:00
292fcfab98
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-28 01:22:24 +00:00
53d54747ec
Added Password Change on Directory Service Restore Mode (DSRM) Account ( #1899 )
...
* Added Password Change on Directory Service Restore Mode (DSRM) Account
* remove guid so unique one can be auto-assigned
Co-authored-by: Richard Kelley <richard.kelley@qomplx.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:21:55 -06:00
c7417ac40b
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:17:34 +00:00
04913e6441
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-28 01:17:28 +00:00
1e9f1a4c38
Adding T1539 Test 2 - Steal Chrome Cookies ( #1901 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:17:03 -06:00
e406fe0a0f
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:16:26 +00:00
4e7044e077
T1055.001 improvement ( #1902 )
...
Co-authored-by: McDaniel <jmcdan@NTI.local >
Co-authored-by: Jose Enrique Hernandez <josehelps@gmail.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:15:57 -06:00
724cb3f50d
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-28 01:14:49 +00:00
b196333caf
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-28 01:14:45 +00:00
0ddf5d32aa
Add Atomic tests for disabling .NET ETW tracing ( #1903 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-04-27 19:14:22 -06:00
d5dea0d03f
minor adjustment to how workflows are triggered ( #1905 )
2022-04-27 19:13:33 -06:00
db4ca085fc
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-27 17:08:17 +00:00
94fb215b94
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-27 17:08:13 +00:00
ac8cd38038
Adding T1562.006 Test Number 3 ( #1900 )
...
Adding test #3 to simulate the removal of the Powershell provider ETW telemetry source.
2022-04-27 11:07:43 -06:00
7fa5d45acd
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-26 21:46:46 +00:00
00dd1f82a3
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-26 21:46:41 +00:00
7ab002b355
Merge pull request #1892 from jovial7/patch-4
...
Add new test
2022-04-26 14:46:16 -07:00
154ad8eeed
Merge branch 'master' into patch-4
2022-04-26 17:43:18 -04:00
059297cef5
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-26 21:42:55 +00:00
30d17c913b
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-04-26 21:42:51 +00:00
64ccef52c2
Merge pull request #1885 from jessefmoore/T1615jesseee
...
This is for the Challenge Bounty -Group Policy Discovery on Windows
2022-04-26 14:42:30 -07:00
7ea76fd811
Merge branch 'master' into T1615jesseee
2022-04-26 17:37:30 -04:00
6eec2463d2
Merge branch 'master' into patch-4
2022-04-26 17:35:20 -04:00
5acc6a23a1
Merge pull request #1895 from redcanaryco/updating_badge
...
updating the badge
2022-04-26 17:32:04 -04:00
8b7169cce6
Update README.md
2022-04-26 17:30:26 -04:00
c50a2009f7
updating the badge
2022-04-26 17:27:49 -04:00
e7ec519b53
Merge pull request #1894 from redcanaryco/dummy
...
Empty-Commit
2022-04-26 17:14:50 -04:00
6173d5a1bf
Empty-Commit
2022-04-26 17:12:23 -04:00
83b0409004
Generated docs from job=generate-docs branch=master [ci skip]
2022-04-26 20:43:33 +00:00
d09df5ad66
Merge pull request #1893 from redcanaryco/ci_fix
...
updating to use secrets
2022-04-26 16:43:00 -04:00
877708a4b1
Merge branch 'master' into ci_fix
2022-04-26 16:41:33 -04:00
554a059d2b
updating to use secrets
2022-04-26 16:40:43 -04:00
619b57ab6d
Merge branch 'master' into T1615jesseee
2022-04-26 13:47:44 -06:00
1f56b44eb4
update execution command
2022-04-26 13:22:02 -05:00
b9dc4d420e
Merge branch 'master' into patch-4
2022-04-26 10:50:38 -06:00
6a3e340c3d
Merge pull request #1891 from redcanaryco/clr2of8-patch-14
...
use raw url so you get a functional script
2022-04-26 12:46:17 -04:00
d1vious