Commit Graph

4206 Commits

Author SHA1 Message Date
nsher07 7e87e7e9af Update T1070.005.yaml (#1695)
* Update T1070.005.yaml

New test to remove Admin$ share (net share Admin$ /delete)

* add cleanup commands/desc

* spacing fix

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2021-12-23 11:47:28 -07:00
CircleCI Atomic Red Team doc generator e77a01078a Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-21 17:35:29 +00:00
CircleCI Atomic Red Team GUID generator 283e2a79eb Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-21 17:35:23 +00:00
CyberBilly7 bad06f0c3f Add cipher RANSOMEXX test (#1691)
* Add cipher RANSOMEXX test

* update description

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2021-12-21 09:34:54 -08:00
CircleCI Atomic Red Team doc generator 246bc2e4ae Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-16 18:04:51 +00:00
Clément Notin ad7805da81 Kerberoasting: purge tickets before launching attack to ensure cached ones aren't used (#1690)
The TGT is purged too but given that the long term session keys are in LSASS it will be re-fetched too silently
2021-12-16 11:04:17 -07:00
chris d2230e7bba T1018 removed the guid entries 2021-12-14 12:20:21 +00:00
chris 69bacaa674 T1018 2021-12-14 12:11:21 +00:00
CircleCI Atomic Red Team doc generator ff079fb1bf Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-13 21:12:12 +00:00
Carrie Roberts 32eb49ca37 overwrite existing output without prompt (#1688)
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
2021-12-13 14:11:54 -07:00
CircleCI Atomic Red Team doc generator 645826a092 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-13 21:10:58 +00:00
Carrie Roberts b96d532bb8 Using smart defaults so more atomics work w/o custom input args (#1687)
* smart defaults

* smart defaults

* correction
2021-12-13 14:10:18 -07:00
CircleCI Atomic Red Team doc generator b8333150c1 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-09 22:52:57 +00:00
CircleCI Atomic Red Team GUID generator ea555fab07 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-09 22:52:52 +00:00
lucasRiley c05e8c7dde T1135 Powerview (#1686)
* T1135 Powerview

* Update T1135.yaml

* Simplifying updates

Co-authored-by: Riley <lriley@NTI.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2021-12-09 15:52:22 -07:00
CircleCI Atomic Red Team doc generator 8985aaf0f0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-09 18:42:48 +00:00
Carrie Roberts 5bb5878e62 Cleaning up the Cleanup commands (#1685)
* cleanup fixes

* cleanup fixes

* cleanup fixes
2021-12-09 11:42:14 -07:00
CircleCI Atomic Red Team doc generator 17d151ba0c Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-08 19:05:10 +00:00
Carrie Roberts 0681f97a82 type fixes per issue 1683 (#1684) 2021-12-08 12:04:34 -07:00
CircleCI Atomic Red Team doc generator d1789b5bfc Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-08 16:57:20 +00:00
hackeT 5b360eb744 T1550.003 pass the ticket by mimikatz patch (#1682)
* Update T1550.003.md

To avoid mimikatz failure and more useful argument description

* Update T1550.003.yaml

To avoid to fail mimikatz  kerberos::ptt and be more easier to understand about argument.

* Update T1550.003.yaml

* Update T1550.003.md

* Update T1550.003.md

* Update T1550.003.yaml
2021-12-08 09:56:45 -07:00
CircleCI Atomic Red Team doc generator d07703afe0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:20:49 +00:00
CircleCI Atomic Red Team GUID generator eabee62e93 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:20:43 +00:00
Michael Haag 9ac016f0e6 DISM (#1681)
DISM removal of Defender.

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2021-12-07 10:20:27 -07:00
CircleCI Atomic Red Team doc generator 87dd1295e6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:18:10 +00:00
CircleCI Atomic Red Team GUID generator 820418c73d Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:18:04 +00:00
Carl ed54325185 Merge pull request #1676 from glallen/T1027.004
T1027.004 - Adds Linux compile tests for C, C++, and Go
2021-12-07 10:17:42 -07:00
Carl 39432ead47 Merge branch 'master' into T1027.004 2021-12-07 10:16:01 -07:00
CircleCI Atomic Red Team doc generator 6ebd4669ad Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:15:26 +00:00
CircleCI Atomic Red Team GUID generator 53dc13c016 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:15:21 +00:00
Carl eba59274db Merge branch 'master' into T1027.004 2021-12-07 10:15:13 -07:00
Carl 2ff951e359 Merge pull request #1671 from Danvele/T1048.002
T1048.002
2021-12-07 10:15:03 -07:00
Carl ca09bb0565 Merge branch 'master' into T1048.002 2021-12-07 10:13:35 -07:00
Carrie Roberts 33b6df39ec Merge branch 'master' into T1027.004 2021-12-07 10:12:57 -07:00
CircleCI Atomic Red Team doc generator cf0bb081ef Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 17:01:53 +00:00
Carl 19a7881cab Merge branch 'master' into T1048.002 2021-12-07 10:01:18 -07:00
Carl c0a387fb65 Merge pull request #1675 from glallen/T1069.001
T1069.001 - update existing test with: id, getent, cat group
2021-12-07 10:01:07 -07:00
Carl fa49ec472e Merge branch 'master' into T1048.002 2021-12-07 09:55:55 -07:00
Carl 35d7f4739e Merge branch 'master' into T1069.001 2021-12-07 09:55:05 -07:00
CircleCI Atomic Red Team doc generator 37ea965727 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 16:27:21 +00:00
Carl 2f7d25c7b9 Merge branch 'master' into T1027.004 2021-12-07 09:26:56 -07:00
Carl 72c7517bea Merge pull request #1677 from glallen/T1036.006
T1036.006 Adds an automated test for space after filename.
2021-12-07 09:26:51 -07:00
Carl e66d81e45c Merge branch 'master' into T1036.006 2021-12-07 09:24:44 -07:00
Carl 5a1033bad6 Merge branch 'master' into T1036.006 2021-12-07 09:23:42 -07:00
CircleCI Atomic Red Team doc generator 2e0b4540be Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 16:23:41 +00:00
Carl a657de47ac Merge pull request #1678 from glallen/T1003.008
T1003.008
2021-12-07 09:23:12 -07:00
Carl d731ff90f6 Merge branch 'master' into T1003.008 2021-12-07 09:21:58 -07:00
CircleCI Atomic Red Team doc generator 6dc53a3a72 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-07 16:21:33 +00:00
Carl 728fa3ce9e Merge pull request #1679 from glallen/T1485-fix-dd
T1485 - constrains dd to write the original file size when overwriting
2021-12-07 09:20:54 -07:00
Danvele 3ecfab37f7 Merge branch 'redcanaryco:master' into T1048.002 2021-11-24 10:03:25 +01:00