17c6d08894
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-12 20:17:02 +00:00
d52425fa8c
Merge pull request #1689 from chdd-ltd/T1018
...
T1018 added three ip utility tests
2022-01-12 13:16:27 -07:00
2b7f9a381d
Merge branch 'master' into T1018
2022-01-12 13:13:35 -07:00
8c07547d65
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-12 20:13:02 +00:00
ad0d097ec0
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-12 20:12:56 +00:00
3f1fb3c121
Merge pull request #1713 from chdd-ltd/T1110.001_sudo_bruteforce
...
T1110.001 - Added two Linux local SUDO bruteforce tests
2022-01-12 13:12:31 -07:00
1b5d789a7b
Merge branch 'master' into T1110.001_sudo_bruteforce
2022-01-12 13:11:43 -07:00
2019d6c993
Updated version of the CoC ( #1718 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-01-12 07:40:27 -06:00
4bffef03dd
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-12 13:39:32 +00:00
35acd81273
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-12 13:39:27 +00:00
b9750ef5cd
Extend T1550.003 with new PTT attack ( #1717 )
...
* Extend T1550.003 with new PTT attack
* Applying Carrie's suggestion
2022-01-12 07:39:00 -06:00
dfea108f00
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-10 19:36:25 +00:00
56d6fec8db
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-10 19:36:19 +00:00
12e9da546c
Create T1091.yaml ( #1715 )
...
Creating a directory for T1091 and corresponding YAML file so that a new test can be submitted for this technique. The proposed test is designed to detect removable drives connected to a Windows system and then create a file named "T1091Test1.txt" on them to simulate USB spread.
2022-01-10 12:35:48 -07:00
e8c33dcbb5
T1110.001_sudo_bruteforce
2022-01-08 17:47:55 +00:00
957ca44e55
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-07 22:29:03 +00:00
ef47d419f1
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-07 22:28:59 +00:00
6221a181ab
Fix windows test ( #1711 )
2022-01-07 15:28:30 -07:00
1351165d33
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-06 17:23:26 +00:00
7abf7fe918
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-06 17:23:20 +00:00
153f4aa939
adding T1547.002 ( #1697 )
...
* adding T1547.002
* removing auto_generated_guid
* fixing payloads
* updating cleanup cmd and description
* removing submodules, adding payload source
* removing submodule, adding payloads src
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-01-06 11:22:52 -06:00
c7cfd2cac0
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-05 21:42:39 +00:00
c45170dcaa
fix test ( #1709 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-01-05 14:42:06 -07:00
0097ce4b39
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-05 21:39:28 +00:00
b83ffcf37c
Updating T1217 Test 4 to include Opera ( #1708 )
...
Upon attempting to develop an atomic for Opera bookmark discovery and testing T1217 Test 4, found that this test also detects Opera bookmarks in addition to Chrome's. Modifying name/description of this test to outline that it finds Opera bookmarks too.
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-01-05 14:38:55 -07:00
131febbcdb
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-05 21:35:39 +00:00
9446159b59
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2022-01-05 21:35:34 +00:00
4b8a21d4d7
Adding T1497.001 Test 4 ( #1706 )
...
This test is a second method of detecting virtualization within Windows by querying the WMI manufacturer/model.
2022-01-05 14:35:05 -07:00
715ee2f7bf
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-30 20:08:23 +00:00
6d0d802558
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-30 20:08:18 +00:00
aa6cab9772
Adding T1555.003 Test 5 - Simulating Access to Opera Login Data ( #1698 )
...
* Adding Test 5 - Simulating Access to Opera Login Data
Adding a 5th test that simulates access to Opera Login Data within Windows.
* Update T1555.003.yaml
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-12-30 13:07:54 -07:00
16f8bfd71c
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-30 19:21:54 +00:00
b9ee00896b
Update T1202.yaml ( #1704 )
...
* Update T1202.yaml
Update executor for Windows Indirect Command Execution
* Update T1202.yaml
* Update T1202.yaml
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-12-30 12:21:38 -07:00
4c36b9b772
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-30 19:08:33 +00:00
e0f2a76114
Update T1003.yaml ( #1702 )
...
* Update T1003.yaml
Add -UseBasicParsing to line 41
* Update T1003.yaml
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-12-30 12:08:06 -07:00
a65adae62d
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-30 19:05:18 +00:00
f2da872a35
Update T1137.006.yaml ( #1703 )
...
Update default xll_url. Fixes issue #1700 , thx @frack13
2021-12-30 12:04:52 -07:00
d39dc66fa1
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-23 19:00:45 +00:00
73a44d8b8f
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-23 19:00:40 +00:00
60d6849173
Added a New Test in T1070.005 - Disable Administrative Share Creation at Startup ( #1694 )
...
* Update T1003.yaml
Cleared a space liner from command line for Atomic guid : d400090a-d8ca-4be0-982e-c70598a23de9
* Update T1070.005.yaml
Added a new test to disable Admin Share and clean up command
* Update T1003.yaml
* update desc
* update desc
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-12-23 12:00:12 -07:00
7e87e7e9af
Update T1070.005.yaml ( #1695 )
...
* Update T1070.005.yaml
New test to remove Admin$ share (net share Admin$ /delete)
* add cleanup commands/desc
* spacing fix
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-12-23 11:47:28 -07:00
e77a01078a
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-21 17:35:29 +00:00
283e2a79eb
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-21 17:35:23 +00:00
bad06f0c3f
Add cipher RANSOMEXX test ( #1691 )
...
* Add cipher RANSOMEXX test
* update description
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-12-21 09:34:54 -08:00
246bc2e4ae
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-16 18:04:51 +00:00
ad7805da81
Kerberoasting: purge tickets before launching attack to ensure cached ones aren't used ( #1690 )
...
The TGT is purged too but given that the long term session keys are in LSASS it will be re-fetched too silently
2021-12-16 11:04:17 -07:00
d2230e7bba
T1018 removed the guid entries
2021-12-14 12:20:21 +00:00
69bacaa674
T1018
2021-12-14 12:11:21 +00:00
ff079fb1bf
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-12-13 21:12:12 +00:00
32eb49ca37
overwrite existing output without prompt ( #1688 )
...
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com >
2021-12-13 14:11:54 -07:00
CircleCI Atomic Red Team GUID generator