Commit Graph

4206 Commits

Author SHA1 Message Date
patel-bhavin 40ceeff8d9 uuid 2022-08-01 15:05:19 -07:00
patel-bhavin 4ca10f3e5f Merge branch 'staratus_defense_evasion' of github.com:redcanaryco/atomic-red-team into staratus_defense_evasion 2022-08-01 15:01:16 -07:00
patel-bhavin 77a5db8ead vaslidate atomics 2022-08-01 15:01:08 -07:00
Bhavin Patel 9c43327f23 Merge branch 'master' into staratus_defense_evasion 2022-08-01 14:50:20 -07:00
patel-bhavin 6a1b554579 naming 2022-08-01 14:45:09 -07:00
patel-bhavin d888deb5a0 conflicts 2022-08-01 14:43:49 -07:00
Atomic Red Team doc generator 75d1f18790 Generated docs from job=generate-docs branch=master [ci skip] 2022-08-01 21:38:41 +00:00
Atomic Red Team GUID generator 93133c0fc5 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-08-01 21:38:34 +00:00
Bhavin Patel 76f08b5351 Merge pull request #2061 from gowthamarajr/atomics_T1562_008
Add 2 New Atomics - T2562.008
2022-08-01 14:38:00 -07:00
patel-bhavin 89019ac27e uuid 2022-08-01 14:37:29 -07:00
Bhavin Patel e482e532bf Merge branch 'master' into atomics_T1562_008 2022-08-01 14:29:02 -07:00
Atomic Red Team doc generator 423d25021b Generated docs from job=generate-docs branch=master [ci skip] 2022-08-01 21:14:26 +00:00
tenillekay a6edd37f05 Update T1021.006.yaml (#2063)
Updated Test #2 to make it more complete.
2022-08-01 15:13:53 -06:00
Atomic Red Team doc generator 4e0637e706 Generated docs from job=generate-docs branch=master [ci skip] 2022-08-01 16:52:24 +00:00
Atomic Red Team GUID generator e3b3dc6c03 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-08-01 16:52:17 +00:00
Panos Moullotos 4ab943e73b New T1105 test based on open issue (#2060)
* Create T1105-download-file.vbs

* Added 2 tests to T1105 based on open issue

* Update T1105.yaml

* remove duplicate

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-08-01 10:51:46 -06:00
gowthamarajr 614a715da8 Update 1562.008.yml 2022-07-30 17:37:06 -04:00
gowthamarajr b33bcb6cd4 Update T1562.008 2022-07-30 17:28:51 -04:00
gowthamarajr 7ac7517321 Update T1562.008
Update T1562.008 by adding AWS CloudWatch Log Group Deletes & AWS CloudWatch Log Stream Deletes
2022-07-30 17:18:08 -04:00
Atomic Red Team doc generator 3a5209a4fc Generated docs from job=generate-docs branch=master [ci skip] 2022-07-29 22:32:00 +00:00
Atomic Red Team GUID generator 023e149ac5 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-07-29 22:31:53 +00:00
lucasRiley e712150c21 T1218.011 Improvement (#2058)
Co-authored-by: Riley <lriley@NTI.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-07-29 16:31:23 -06:00
Atomic Red Team doc generator 6f92864b88 Generated docs from job=generate-docs branch=master [ci skip] 2022-07-29 15:14:22 +00:00
Atomic Red Team GUID generator 5849c1516b Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-07-29 15:14:16 +00:00
tccontre f6b385f860 Update T1529.yaml (#2055)
* Update T1529.yaml

* add malware example to description

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-07-29 09:13:53 -06:00
Atomic Red Team doc generator 8d57cd72e5 Generated docs from job=generate-docs branch=master [ci skip] 2022-07-29 15:07:16 +00:00
Atomic Red Team GUID generator 0b80c61208 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-07-29 15:07:10 +00:00
Jacques Decarie c343036e0c T1546.015 COM hijacking via TreatAs (#2050)
* adding TreatAs

* removing sct_path

* fixing executor name

* fixing references

* fixing references

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2022-07-29 09:06:38 -06:00
tccontre b05d6193da Windows camera info gathering (#2056)
* Create T1592.001.md

* Create T1592.001.yml
2022-07-29 09:02:55 -06:00
patel-bhavin 11ebaedddf uuid 2022-07-28 17:22:54 -07:00
patel-bhavin 0e99122ced update to cleaanup 2022-07-28 16:28:20 -07:00
Atomic Red Team doc generator b13fb3c35e Generated docs from job=generate-docs branch=master [ci skip] 2022-07-28 21:29:24 +00:00
TaintedHorizon a43555eab0 update dependencies (#2053)
Test does not currently execute remotely because ppid-spoof.ps1 does not get copied remotely.
2022-07-28 15:28:41 -06:00
patel-bhavin e88796c915 rm stratus 2022-07-28 13:12:08 -07:00
patel-bhavin 0b298b2188 3 new aws stratus atomics 2022-07-27 16:36:03 -07:00
Atomic Red Team doc generator 8a226086a6 Generated docs from job=generate-docs branch=master [ci skip] 2022-07-27 20:15:26 +00:00
Atomic Red Team GUID generator 983626faae Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-07-27 20:15:20 +00:00
Bhavin Patel db6284063a Merge pull request #2048 from Leomon5/patch-5
Adding T1526 Test 1 - Azure - Dump Subscription Data with MicroBurst
2022-07-27 13:14:51 -07:00
Bhavin Patel 9601cdbf58 Merge branch 'master' into patch-5 2022-07-27 13:09:33 -07:00
Atomic Red Team doc generator dfebe2e36e Generated docs from job=generate-docs branch=master [ci skip] 2022-07-27 19:45:08 +00:00
Atomic Red Team GUID generator 93d582a214 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-07-27 19:45:02 +00:00
Bhavin Patel 79286ddee5 Disable CloudTrail Logging Through Event Selectors via Stratus (#2040)
* detonate via stratus

* desc update

* Update T1562.008.yaml

Co-authored-by: Jose Enrique Hernandez <josehelps@gmail.com>
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
2022-07-27 13:44:00 -06:00
Bhavin Patel 21b907e718 Merge branch 'master' into patch-5 2022-07-26 10:48:02 -07:00
Atomic Red Team doc generator e69a037e1c Generated docs from job=generate-docs branch=master [ci skip] 2022-07-26 17:40:11 +00:00
Atomic Red Team GUID generator 158fd1f7a9 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-07-26 17:40:05 +00:00
Bhavin Patel 974ae50a12 Merge pull request #2046 from Leomon5/patch-4
Adding T1552.005 Test 1 - Search Azure AD User Attributes for Passwords
2022-07-26 10:39:38 -07:00
Bhavin Patel 7324595e26 Merge branch 'master' into patch-4 2022-07-26 10:34:56 -07:00
Leo Verlod 7efbda6972 Adding T1526 Test 1 2022-07-26 03:54:34 -05:00
Atomic Red Team doc generator ea2ebf426b Generated docs from job=generate-docs branch=master [ci skip] 2022-07-25 20:57:48 +00:00
Atomic Red Team GUID generator c13f88d9b7 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-07-25 20:57:41 +00:00