security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,195 Commits 47 Branches 0 Tags
114fe09474f36d4eae67ec7e4f56618e59fb545f
Commit Graph

3195 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 114fe09474 Bump nokogiri from 1.11.4 to 1.12.5 (#1634) 
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.11.4 to 1.12.5.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.11.4...v1.12.5)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-09-29 09:50:08 -06:00
CircleCI Atomic Red Team doc generator ae39dcfe39 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-23 21:43:13 +00:00
CircleCI Atomic Red Team GUID generator a612eaebb9 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-23 21:43:08 +00:00
lucasRiley 16bd391f53 Wevtutil Event log Disable (#1633) 
* wevtutil sets the log and then disables it

* update input arg desc

Co-authored-by: Riley <lriley@NTI.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-09-23 15:42:33 -06:00
CircleCI Atomic Red Team doc generator 29fe641593 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-23 21:25:46 +00:00
CircleCI Atomic Red Team GUID generator c2d50e980f Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-23 21:25:41 +00:00
lucasRiley 32c8874944 Dns exfiltrator (#1631) 
* DNSExfiltrator

* DNSExfiltrator DoH

* updated input arg descriptions

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-09-23 15:25:08 -06:00
CircleCI Atomic Red Team doc generator 3c80fa064e Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-20 18:48:06 +00:00
CaptainMoss b8ba7470ca Update T1056.001.yaml (#1632) 
Why executor name is command prompt ? It should be 'sh' for linux platforms right ?
 2021-09-20 12:47:43 -06:00
CircleCI Atomic Red Team doc generator a0edb02b80 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 16:50:17 +00:00
Carrie Roberts ad77c4245c update description, correct link (#1630) 
* update description, correct link

* Update T1082.yaml

updated a word

Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
 2021-09-15 10:49:48 -06:00
CircleCI Atomic Red Team doc generator 2d3f3c6ba4 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 14:13:57 +00:00
Carrie Roberts e695715b47 using github permanent URL (#1628) 2021-09-15 08:13:16 -06:00
CircleCI Atomic Red Team doc generator e0b6ebd6c7 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 14:07:26 +00:00
CircleCI Atomic Red Team GUID generator fd9667ae0c Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 14:07:20 +00:00
Carrie Roberts f891465d8d Add PowerUp Invoke-AllChecks (#1629) 2021-09-15 08:06:46 -06:00
CircleCI Atomic Red Team doc generator 2a6a82f945 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 02:11:02 +00:00
CircleCI Atomic Red Team GUID generator 358124ee2d Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 02:10:57 +00:00
tlor89 ef9870b4a0 T1555.003_Update (#1626) 
* T1555.003_Update

* Update T1555.003.yaml

Made the recommend changes

* description update

Co-authored-by: Toua Lor <tlor@nti.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-09-14 20:10:23 -06:00
CircleCI Atomic Red Team doc generator 1173a5f1f3 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 01:29:34 +00:00
CircleCI Atomic Red Team GUID generator f7404e80e8 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-15 01:29:29 +00:00
Michael Haag f2201c7d4d Update T1069.001.yaml (#1627) 2021-09-14 19:29:06 -06:00
CircleCI Atomic Red Team doc generator 12ca65b029 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-10 15:56:41 +00:00
CircleCI Atomic Red Team GUID generator f6849b45b8 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-10 15:56:35 +00:00
Corellios c8aebb9a41 Add SharpHound LocalAdmin attack (#1625) 2021-09-10 09:56:00 -06:00
CircleCI Atomic Red Team doc generator 895016b6bd Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-10 15:47:32 +00:00
CircleCI Atomic Red Team GUID generator 76420cb24e Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-10 15:47:27 +00:00
Corellios adb2b53f0f T1187: PetitPotam coerce authentication attack (#1620) 
* Add PetitPotam coerce authentication attack

* Change executable URL to a permalink

* Fix cleaning

Co-authored-by: Clément Notin <cnotin@tenable.com>
 2021-09-10 09:47:00 -06:00
CircleCI Atomic Red Team doc generator a7e6de503a Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-09 21:10:42 +00:00
Raislin d5c9c01e4f Update T1047.yaml (#1624) 2021-09-09 15:10:08 -06:00
CircleCI Atomic Red Team doc generator b66dfc7001 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-09 20:59:14 +00:00
CircleCI Atomic Red Team GUID generator acd77c68cb Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-09 20:59:10 +00:00
Raislin 167fb3c2f6 T1047_update (#1623) 
* T1047_update

* T1047_update

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-09-09 14:58:43 -06:00
CircleCI Atomic Red Team doc generator 217dc47106 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-09 18:05:56 +00:00
CircleCI Atomic Red Team GUID generator 1605c05954 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-09 18:05:50 +00:00
Brian Thacker fbbdd008ac Add test Windows - Disable the SR scheduled task (#1622) 
Use schtasks.exe to disable the System Restore (SR) scheduled task

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-09-09 12:05:16 -06:00
CircleCI Atomic Red Team doc generator ba0b1a3c35 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-09 18:02:46 +00:00
CircleCI Atomic Red Team GUID generator 356a8bbe88 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-09 18:02:40 +00:00
Brian Thacker 6d46517d6f T1105 add test download with imewdbld (#1621) 
* Add test "Download a file with IMEWDBLD.exe"

IMEWDBLD.exe can be used to download files from third party websites. This will throw an error for an invalid dictionary but the file will still be downloaded.
Commands to execute this activity and cleanup commands added.
Cleanup commands call on cmd.exe because PowerShell by default would not remove those files.
Disclosed by https://twitter.com/notwhickey
https://twitter.com/notwhickey/status/136749340683504026

* Update T1105.yaml

fixed typo test 17

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-09-09 12:02:26 -06:00
CircleCI Atomic Red Team doc generator 4114a92cfa Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-08 16:17:12 +00:00
CircleCI Atomic Red Team GUID generator 095df1c717 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-08 16:17:08 +00:00
Bhavin Patel 4fad473a71 Merge pull request #1606 from piaconsigny/pr-golden-saml 
T1606.002: Add Golden SAML atomic
 2021-09-08 09:16:36 -07:00
Bhavin Patel 4cdedbef11 Merge branch 'master' into pr-golden-saml 2021-09-08 09:15:57 -07:00
CircleCI Atomic Red Team doc generator f72420bbcc Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-04 00:27:02 +00:00
CircleCI Atomic Red Team GUID generator e4bfc77bf2 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-04 00:26:58 +00:00
tlor89 ae0fd36089 Added ScreenConnect application (#1618) 
* Added ScreenConnect application

* update line spacing

* some wording updates and cleanup.

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-09-03 18:26:26 -06:00
CircleCI Atomic Red Team doc generator bc21f59ff0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-04 00:21:31 +00:00
Josh Rickard 1513717eb2 Updating atomics to conform to standard (#1619) 
* Updated format of input_argument types for Url

* Updated type for input_arguments to Url (missed)

* Updating Path type for input_arguments

* Updated String type for input_arguments

* Missed a few Strings and Url types

* Updated default values for input_arguments to align with their types

* Updated Integer type for input_arguments

* Updated formatting and spacing of atomics
 2021-09-03 18:20:46 -06:00
CircleCI Atomic Red Team doc generator bcedc9a826 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-02 15:24:25 +00:00
CircleCI Atomic Red Team GUID generator 216113c9bf Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-02 15:24:20 +00:00