security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,206 Commits 47 Branches 0 Tags
40ceeff8d9d953cdc41e9c924e0ec00a20609a47
Commit Graph

43 Commits

Author SHA1 Message Date
Atomic Red Team doc generator 8a226086a6 Generated docs from job=generate-docs branch=master [ci skip] 2022-07-27 20:15:26 +00:00
Atomic Red Team doc generator e69a037e1c Generated docs from job=generate-docs branch=master [ci skip] 2022-07-26 17:40:11 +00:00
Atomic Red Team doc generator e056ac4633 Generated docs from job=generate-docs branch=master [ci skip] 2022-06-22 19:15:42 +00:00
Atomic Red Team doc generator 819934cc3f Generated docs from job=generate-docs branch=master [ci skip] 2022-06-16 22:47:00 +00:00
Atomic Red Team doc generator ffb8cda982 Generated docs from job=generate-docs branch=master [ci skip] 2022-05-01 05:11:40 +00:00
CircleCI Atomic Red Team doc generator 7091fa8b16 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-04-01 14:37:00 +00:00
CircleCI Atomic Red Team doc generator 021fe46502 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-22 15:39:03 +00:00
CircleCI Atomic Red Team doc generator ab80bae8e0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-26 20:08:34 +00:00
CircleCI Atomic Red Team doc generator 1c252a7cec Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-24 15:03:44 +00:00
CircleCI Atomic Red Team doc generator 7576aff377 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-18 21:57:11 +00:00
Carl 39432ead47 Merge branch 'master' into T1027.004 2021-12-07 10:16:01 -07:00
CircleCI Atomic Red Team doc generator 6ebd4669ad Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:15:26 +00:00
Carrie Roberts 33b6df39ec Merge branch 'master' into T1027.004 2021-12-07 10:12:57 -07:00
CircleCI Atomic Red Team doc generator 37ea965727 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 16:27:21 +00:00
George Allen 56f162be2f T1027.004 generate-guids 2021-11-22 00:57:11 +00:00
CircleCI Atomic Red Team doc generator 717757d539 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-03 18:57:08 +00:00
CircleCI Atomic Red Team doc generator 4114a92cfa Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-08 16:17:12 +00:00
CircleCI Atomic Red Team doc generator eb62bcd9fc Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-08-27 15:57:14 +00:00
CircleCI Atomic Red Team doc generator 2795e1312d Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-08-18 20:14:40 +00:00
CircleCI Atomic Red Team doc generator 7ddb14123d Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-08-05 17:04:33 +00:00
CircleCI Atomic Red Team doc generator 66bf3375ba Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-07-08 17:21:56 +00:00
CircleCI Atomic Red Team doc generator e54b5b1d48 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-07-02 17:00:00 +00:00
CircleCI Atomic Red Team doc generator ca1e5786ed Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 20:45:11 +00:00
CircleCI Atomic Red Team doc generator ecc7d70057 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-11 20:04:40 +00:00
CircleCI Atomic Red Team doc generator 1f69c7fb08 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-11 19:45:31 +00:00
CircleCI Atomic Red Team doc generator 0c19189bf8 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-11 19:40:11 +00:00
CircleCI Atomic Red Team doc generator 94d442bcd6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-04 17:14:26 +00:00
CircleCI Atomic Red Team doc generator e37f8c6178 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-05-28 15:42:02 +00:00
CircleCI Atomic Red Team doc generator 507e5b8716 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-05-21 20:26:14 +00:00
CircleCI Atomic Red Team doc generator 03ee9ef29b Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-05-08 18:03:02 +00:00
inc0gnit0 ee6707aadb Added T1053.006 - Blackbot Inc. (#1412) 
* Added T1053.006 - Raymond

* Update T1053.006.yaml

* Update used_guids.txt

Co-authored-by: ryang <ryang@blackbot.io>
 2021-04-06 21:39:25 -06:00
CircleCI Atomic Red Team doc generator 7f6de4f651 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-03-01 17:33:15 +00:00
Keith McCammon 28086402e2 Maintainers updates (#1328) 
* Update maintainers.md

Remove reference to announcements channel, which has been created.

* Generate docs from job=validate_atomics_generate_docs branch=maintainers-updates

* Update maintainers.md

Updates to maintainers meeting purpose, scope, and agendas.

* Generate docs from job=validate_atomics_generate_docs branch=maintainers-updates

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2020-12-15 14:18:41 -07:00
Matt Graeber e9cb3c2f59 Update README.md (#1302) 
* Update README.md

Updating execution frameworks link.

* Generate docs from job=validate_atomics_generate_docs branch=mgraeber-rc-patch-1

* Generate docs from job=validate_atomics_generate_docs branch=mgraeber-rc-patch-1

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
Co-authored-by: Michael Haag <mike@redcanary.com>
 2020-11-30 09:18:32 -07:00
Keith McCammon e1181e7384 Merge OSCD branch into master (#1273) 
* Tests added

* standardize display name

* Add tests for T1134.001 Access Token Impersonation/Theft (#1236)

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* Changing to device manufacturer based test

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* Add test for T1006 Direct Volume Access (#1254)

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* [OSCD] T1036.004: Masquerade Task or Service - 2 tests (#1253)

* T1036.004 - 2 tests added

* Update T1036.004.yaml

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* T1136.002 - 2 tests added (#1252)

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* [OSCD] Create atomic test for T1113 for Windows (#1251)

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* update T1564.002

* update T1564.002

* add Gatekeeper disable; add cleanup for security tools disable; add another launchagent for carbon black defense; remove Gatekeeper disable command from Gatekeeper bypass technique

* Added T1562.006 tests to emulate indicator blocking by modifying configuration files

* Removed prereq and fixed command endings

* Indirect command execution - conhost (#1265)

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* [OSCD] Office persiststence :  Office test (#1266)

* Office persiststence :  Office test

* Added technique details

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* Remove index files to avoid CI complaints.

* Grr

* Generate docs from job=validate_atomics_generate_docs branch=oscd

* Generate docs from job=validate_atomics_generate_docs branch=oscd

Co-authored-by: haresudhan <code@0x6c.dev>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
Co-authored-by: gregclermont <580609+gregclermont@users.noreply.github.com>
Co-authored-by: CircleCI Atomic Red Team doc generator <email>
Co-authored-by: Carl <57147304+rc-grey@users.noreply.github.com>
Co-authored-by: mrblacyk <kweinzettl@gmail.com>
Co-authored-by: sn0w0tter <42819997+sn0w0tter@users.noreply.github.com>
Co-authored-by: Yugoslavskiy Daniil <yugoslavskiy@gmail.com>
Co-authored-by: aw350m3 <aw350m3@yandex.com>
Co-authored-by: omkargudhate22 <36105402+omkar72@users.noreply.github.com>
 2020-10-29 22:54:55 -06:00
CircleCI Atomic Red Team doc generator 298a90bcb5 Generate docs from job=validate_atomics_generate_docs branch=master 2020-10-08 13:39:28 +00:00
CircleCI Atomic Red Team doc generator 55e967cd13 Generate docs from job=validate_atomics_generate_docs branch=master 2020-08-02 00:31:08 +00:00
Michael Haag 2cc5348312 Fix T1551 to T1070 (#1161) 
* Fix T1551 to T1070

Found that we had T1070 labeled incorrectly as T1551. MITRE pushed a fix for this per https://attack.mitre.org/resources/updates/updates-july-2020/

```
Indicator Removal on Host Was incorrectly re-IDd to T1551, restored to T1070 and its sub-techniques were changed to T1070.001, T1070.002, T1070.003, T1070.004, T1070.005, and T1070.006
```

* Generate MD fix

Attempting to get the MD to generate

* Update enterprise-attack.json

* Generate docs from job=validate_atomics_generate_docs branch=T1070-indicator-removal-fix

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
 2020-08-01 09:46:06 -06:00
Carrie Roberts 24549e3866 Convert to Mitre ATT&CK sub-technique schema (#1056) 
* Initial transfer of atomics to MITRE subtechniques

* Add GUIDs back in, attack_technique to string (#1019)

* technique to string and add guids back in

* technique to string and add guids back in

* technique to string and add guids back in

* technique to string and add guids back in

* Subtechnique transfer T1220-T1546.005 (#1020)

* Create T1222.001.yaml

* Create T1222.002.yaml

* Create T1505.002.yaml

* Update T1543.003.yaml

* Update AtomicService.cs

* Update T1546.005.yaml

* Delete T1222.yaml

* Update T1482.yaml

* Update T1485.yaml

* Update T1220.yaml

* Update T1489.yaml

* Update T1490.yaml

* Update T1496.yaml

* Update T1505.003.yaml

* Update T1505.yaml

* Update T1518.001.yaml

* Update T1518.yaml

* Update T1529.yaml

* Update T1543.004.yaml

* Update T1546.001.yaml

* Update T1546.002.yaml

* Update T1546.002.yaml

* Update T1546.001.yaml

* Update T1543.004.yaml

* Update T1543.002.yaml

* Update T1543.001.yaml

* Update T1518.001.yaml

* Update T1546.004.yaml

* Update T1546.003.yaml

* Update T1531.yaml

* Update T1222.001.yaml

* Update T1222.002.yaml

* Update T1505.002.yaml

* Update T1505.003.yaml

* Update T1518.001.yaml

* Update T1543.001.yaml

* Update T1546.005.yaml

* Update T1546.004.yaml

* Update T1546.003.yaml

* Update T1546.002.yaml

* Update T1546.001.yaml

* Update T1543.004.yaml

* Update T1543.003.yaml

* Update T1543.002.yaml

* added auto_generated_guid 1220

* added T1222.001 auto_generated_guid

* Update T1222.002.yaml

added   auto_generated_guid entries

* Update T1482.yaml

  auto_generated_guid added

* Update T1485.yaml

added   auto_generated_guids

* Update T1489.yaml

added   auto_generated_guids

* Update T1490.yaml

added   auto_generated_guids

* Update T1496.yaml

added   auto_generated_guid

* Update T1505.002.yaml

added   auto_generated_guid from old T1505 same atomic

* Update T1505.003.yaml

added  auto_generated_guid from previous atomic 1100

* Delete T1505.yaml

no longer needed, moved to 1505.002

* Update T1518.yaml

added  auto_generated_guids

* Update T1529.yaml

added   auto_generated_guids

* Update T1531.yaml

added   auto_generated_guids

* Update T1543.001.yaml

added   auto_generated_guid

* Update T1543.002.yaml

added   auto_generated_guid

* Update T1543.004.yaml

added   auto_generated_guid

* Update T1546.001.yaml

added   auto_generated_guid

* Update T1546.002.yaml

added   auto_generated_guid

* Update T1546.003.yaml

* Update T1546.004.yaml

added  auto_generated_guid

* Update T1546.005.yaml

added  auto_generated_guid

* add guids back in

* fix spacing issue

* fix spacing

* fix spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>

* Sub-techniques T1053-T1113 - Updates (#1022)

* Sub-techniques T1053-T1113 - Updates

Updated techniques for sub-techniques.

* minor fixes

format fixing

* Added GUIDs

- Added GUIDs back
- Fixed typo (T1054)
- Fixed attack_technique from an array to a string

* Sub-technique updates T1546.008 through T1574.011 (#1024)

* sub technique updates

* sub technique updates

* sub technique updates

* Carrie updates (#1017)

* updated T1110,12,13

* updated T1114

* updated T1114

* updated T1115

* updated T1119

* updated T1123,24

* updated T1127

* updated T1114

* updated T1127

* updated T1132

* T1134.004

* T1134.004

* updated T1135

* updated T1136

* updated T1137

* updated T1140

* remove depracted T1153

* updated T1176

* updated T1197

* updated T1201

* updated T1202

* updated T1204

* updated T1207

* updated T1216

* updated T1204

* updated T1217

* updated T1218

* updated T1218

* updated T1219

* updated T1218

* attack_technique to string

* Subtechnique transfer (#1025)

* T1003 review

* T1005 manual review changes

* T1027.002 sub-technique review

* T1027.004 sub-technique review

* T1036 sub-technique review

* T1037 sub-technique review

* T1048 sub-technique review

* YAML bugfixes

* Adding auto-generated GUIDs back to tests

* merging with Mike's PR

* Merging with Carrie's PR

* fix spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>

* Subtechnique fix (#1026)

* add atomic_tests: element

* add atomic_tests: element

* more fixes

* more fixes

* more fixes

* sub technique minor fixes 1 (#1027)

* fixes

* fixes

* more fixes

* more fixes

* display name fix (#1028)

* remove some deprecated stuff. reorganize a little (#1031)

* Gendocs fix (#1033)

* gendocs updates for subtechniques

* add folders

* ignore auto generated markdown files

* remove tmp files

* add tmp files

* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer

* navigator layer v3.0

* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer

Co-authored-by: Matt Graeber <60448025+mgraeber-rc@users.noreply.github.com>
Co-authored-by: Tsora-Pop <35981510+Tsora-Pop@users.noreply.github.com>
Co-authored-by: Michael Haag <mike@redcanary.com>
Co-authored-by: CircleCI Atomic Red Team doc generator <email>
 2020-06-17 12:55:46 -06:00
CircleCI Atomic Red Team doc generator 6f757a1f88 Generate docs from job=validate_atomics_generate_docs branch=master 2020-05-11 19:16:06 +00:00
Keith McCammon cd8ef8f5c0 OCD :) (#967) 
* OCD :)

* Generate docs from job=validate_atomics_generate_docs branch=atomic_friday

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
 2020-05-01 14:03:32 -06:00
CircleCI Atomic Red Team doc generator 00d070005f Generate docs from job=validate_atomics_generate_docs branch=master 2020-04-04 02:44:12 +00:00
Carrie Roberts a87eeeb535 add csv index by OS, then by tactic and technique, add art_layer json per OS (#903) 
* add csv index by OS, then by tactic and technique

* generate art layer for each OS

* generate art layer for each OS

* update readme

* reset files

* a little cleanup

* a little cleanup

* deleted files from old location

* new folder structure and naming

* link fix

* temp add
 2020-04-03 11:14:15 -06:00