38b2b2f2d3
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:52:44 +00:00
7e4f6a4b88
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:52:38 +00:00
aca73307fa
Add test "Remove the Zone.Identifier alternate data stream" ( #1612 )
...
Add test "Remove the Zone.Identifier alternate data stream". Test command removes the zone.identifier. The cleanup command adds the zone.identifier with the id for "internet". Check prereq checks that the test file exists. Get prereq gets the file from the internet and adds the zone.identifier with the id for "internet".
More info:
https://www.howtogeek.com/70012/what-causes-the-file-downloaded-from-the-internet-warning-and-how-can-i-easily-remove-it/
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/unblock-file?view=powershell-7
https://www.reddit.com/r/PowerShell/comments/6yyf07/remove_alternate_data_streams/dmrb6zl/
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-30 13:52:02 -06:00
e95076c17d
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:16:31 +00:00
78a438c687
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:16:26 +00:00
5bda040ce8
Updated O365-Disable-AntiPhishRule test ( #1611 )
...
* updated O365-Disable-AntiPhishRule test
* updated as per review comments
Co-authored-by: Araveti Esanya Reddy <esanya.araveti@kudelskisecurity.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-30 13:15:58 -06:00
9965165d19
Delete CNAME ( #1613 )
...
Removing file in prep to migrate atomicredteam[.]io site.
2021-08-30 13:13:57 -06:00
19146099ab
Create CNAME
2021-08-30 13:09:12 -06:00
b10ba3ecde
Delete CNAME
2021-08-30 13:08:38 -06:00
0391079857
Create CNAME
2021-08-30 13:05:51 -06:00
f73d6feff5
Delete CNAME
2021-08-30 13:05:10 -06:00
a0cf92ca59
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:09:31 +00:00
cf00395732
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:09:26 +00:00
173155eaa6
T1134.002 - Access Token Manipulation: Create Process with Token ( #1601 )
...
* Create T1134.002.yaml
* Add files via upload
* Create GetToken.ps1
* Add files via upload
* Delete T1134.002.yaml
* Add files via upload
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-27 14:09:00 -06:00
1f4a8b9565
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:04:57 +00:00
7e88e14db9
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:04:52 +00:00
a069f3233c
Added a new technique T1041 - Exfiltration Over C2 Channel ( #1593 )
...
* Added a new technique T1041 - Exfiltration Over C2 Channel
* use filepath variable throughout
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-27 14:04:22 -06:00
93a6ff56d0
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 19:58:05 +00:00
b7d3dbb3f4
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 19:57:59 +00:00
521b1abc16
T1555 enumeration with vaultcmd ( #1581 )
...
* Extract credentials from Windows Credential Manager using vaultcmd.exe
* Replace external script dependency in T1555 with powershell command
* Add tests for both vaults in T1555
* T1555 fix name and description
* Revert "Replace external script dependency in T1555 with powershell command"
This reverts commit d8d6a7cf2bbc94a8240643ca600d9be62e0b697e.
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-27 13:57:24 -06:00
06d792aed3
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 16:58:23 +00:00
c73195396d
Merge pull request #1600 from bnt1006/T1553.004_cleanup_test1
...
Update "Install root CA on CentOS/RHEL"
2021-08-27 06:57:51 -10:00
6c7b4eabd8
Merge branch 'master' into T1553.004_cleanup_test1
2021-08-27 06:47:14 -10:00
eb62bcd9fc
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:57:14 +00:00
509d87ad1e
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:57:09 +00:00
5afa61510b
Merge pull request #1598 from JChamblee99/T1556.003-pam
...
T1556.003 Pluggable Authentication Modules
2021-08-27 05:56:40 -10:00
7c7745c98f
Merge branch 'master' into T1556.003-pam
2021-08-27 05:55:56 -10:00
a7ff562b6e
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:54:05 +00:00
eac3cad041
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:54:00 +00:00
10d2bdb182
Merge pull request #1590 from JChamblee99/master
...
T1548.001 - Added Linux capabilities to SUID tests
2021-08-27 05:53:24 -10:00
13136ba535
Merge branch 'master' into master
2021-08-27 05:50:15 -10:00
9f9d549bf5
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:36:59 +00:00
fb345d8ace
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:36:54 +00:00
b91a58eecd
Merge pull request #1561 from chdd-ltd/T1056.001
...
T1056.001 - Added 4 Linux tests
2021-08-27 05:36:15 -10:00
bb56e3718d
Merge branch 'master' into T1056.001
2021-08-27 05:23:17 -10:00
b10fa043d1
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-23 21:09:34 +00:00
50e36cb7e7
Update hardcoded Mimikatz releases download URLs ( #1604 )
...
* update references to hardcoded mimikatz releases
* update invoke-webreauest parameters
* apply -UseBasicParsing consistently to Invoke-WebRequest calls
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-23 15:08:54 -06:00
c2601f14ed
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-23 21:07:19 +00:00
049c18afad
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-23 21:07:15 +00:00
9da37dabc8
Add T1113 test for CopyFromScreen API ( #1610 )
2021-08-23 15:06:58 -06:00
69aa9d859d
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-20 20:18:22 +00:00
2b02f77332
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-20 20:18:17 +00:00
ad98393d8b
rubeus-kerberoasting ( #1609 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-20 14:17:49 -06:00
f72d8699bf
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-19 15:03:48 +00:00
c7ff36af56
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-19 15:03:43 +00:00
263ce17738
Merge pull request #1605 from piaconsigny/pr-adfs-certificates-theft
...
T1552.004: ADFS Certificates theft
2021-08-19 08:03:14 -07:00
364bfbe5e9
Merge branch 'master' into pr-adfs-certificates-theft
2021-08-19 16:20:39 +02:00
9b8c28e748
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-19 14:15:53 +00:00
697d400d0e
bump layer version ( #1608 )
2021-08-19 08:15:15 -06:00
0fd43a3d63
add adfs certificates theft
2021-08-19 11:20:48 +02:00
CircleCI Atomic Red Team doc generator