4cdedbef11
Merge branch 'master' into pr-golden-saml
2021-09-08 09:15:57 -07:00
f72420bbcc
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-09-04 00:27:02 +00:00
e4bfc77bf2
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-09-04 00:26:58 +00:00
ae0fd36089
Added ScreenConnect application ( #1618 )
...
* Added ScreenConnect application
* update line spacing
* some wording updates and cleanup.
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-09-03 18:26:26 -06:00
bc21f59ff0
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-09-04 00:21:31 +00:00
1513717eb2
Updating atomics to conform to standard ( #1619 )
...
* Updated format of input_argument types for Url
* Updated type for input_arguments to Url (missed)
* Updating Path type for input_arguments
* Updated String type for input_arguments
* Missed a few Strings and Url types
* Updated default values for input_arguments to align with their types
* Updated Integer type for input_arguments
* Updated formatting and spacing of atomics
2021-09-03 18:20:46 -06:00
bcedc9a826
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-09-02 15:24:25 +00:00
216113c9bf
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-09-02 15:24:20 +00:00
ab822b2208
Trust Reconnaissance ( #1616 )
...
Two simple Atomic Tests for domain and forest trust information.
2021-09-02 09:23:44 -06:00
fb6a424ec1
Update README.md ( #1615 )
...
Added single character to reflect changes on websites and in wiki.
2021-09-01 16:59:18 -06:00
2892843e35
Merge pull request #1614 from redcanaryco/complete-art-io-site-migration
...
Delete docs directory
2021-08-30 12:53:26 -07:00
0ce485a43b
Merge branch 'master' into complete-art-io-site-migration
2021-08-30 13:52:54 -06:00
38b2b2f2d3
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:52:44 +00:00
1d43b259fa
Merge branch 'master' into complete-art-io-site-migration
2021-08-30 13:52:44 -06:00
7e4f6a4b88
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:52:38 +00:00
762e2992a7
Merge branch 'master' into complete-art-io-site-migration
2021-08-30 13:52:32 -06:00
aca73307fa
Add test "Remove the Zone.Identifier alternate data stream" ( #1612 )
...
Add test "Remove the Zone.Identifier alternate data stream". Test command removes the zone.identifier. The cleanup command adds the zone.identifier with the id for "internet". Check prereq checks that the test file exists. Get prereq gets the file from the internet and adds the zone.identifier with the id for "internet".
More info:
https://www.howtogeek.com/70012/what-causes-the-file-downloaded-from-the-internet-warning-and-how-can-i-easily-remove-it/
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/unblock-file?view=powershell-7
https://www.reddit.com/r/PowerShell/comments/6yyf07/remove_alternate_data_streams/dmrb6zl/
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-30 13:52:02 -06:00
fc96cac822
Delete docs directory
...
Migrated atomicredteam[.]io site to new location.
2021-08-30 12:44:02 -07:00
e95076c17d
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:16:31 +00:00
78a438c687
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-30 19:16:26 +00:00
5bda040ce8
Updated O365-Disable-AntiPhishRule test ( #1611 )
...
* updated O365-Disable-AntiPhishRule test
* updated as per review comments
Co-authored-by: Araveti Esanya Reddy <esanya.araveti@kudelskisecurity.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-30 13:15:58 -06:00
9965165d19
Delete CNAME ( #1613 )
...
Removing file in prep to migrate atomicredteam[.]io site.
2021-08-30 13:13:57 -06:00
19146099ab
Create CNAME
2021-08-30 13:09:12 -06:00
b10ba3ecde
Delete CNAME
2021-08-30 13:08:38 -06:00
0391079857
Create CNAME
2021-08-30 13:05:51 -06:00
f73d6feff5
Delete CNAME
2021-08-30 13:05:10 -06:00
a0cf92ca59
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:09:31 +00:00
cf00395732
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:09:26 +00:00
173155eaa6
T1134.002 - Access Token Manipulation: Create Process with Token ( #1601 )
...
* Create T1134.002.yaml
* Add files via upload
* Create GetToken.ps1
* Add files via upload
* Delete T1134.002.yaml
* Add files via upload
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-27 14:09:00 -06:00
1f4a8b9565
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:04:57 +00:00
7e88e14db9
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 20:04:52 +00:00
a069f3233c
Added a new technique T1041 - Exfiltration Over C2 Channel ( #1593 )
...
* Added a new technique T1041 - Exfiltration Over C2 Channel
* use filepath variable throughout
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-27 14:04:22 -06:00
93a6ff56d0
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 19:58:05 +00:00
b7d3dbb3f4
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 19:57:59 +00:00
521b1abc16
T1555 enumeration with vaultcmd ( #1581 )
...
* Extract credentials from Windows Credential Manager using vaultcmd.exe
* Replace external script dependency in T1555 with powershell command
* Add tests for both vaults in T1555
* T1555 fix name and description
* Revert "Replace external script dependency in T1555 with powershell command"
This reverts commit d8d6a7cf2bbc94a8240643ca600d9be62e0b697e.
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-27 13:57:24 -06:00
06d792aed3
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 16:58:23 +00:00
c73195396d
Merge pull request #1600 from bnt1006/T1553.004_cleanup_test1
...
Update "Install root CA on CentOS/RHEL"
2021-08-27 06:57:51 -10:00
6c7b4eabd8
Merge branch 'master' into T1553.004_cleanup_test1
2021-08-27 06:47:14 -10:00
eb62bcd9fc
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:57:14 +00:00
509d87ad1e
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:57:09 +00:00
5afa61510b
Merge pull request #1598 from JChamblee99/T1556.003-pam
...
T1556.003 Pluggable Authentication Modules
2021-08-27 05:56:40 -10:00
7c7745c98f
Merge branch 'master' into T1556.003-pam
2021-08-27 05:55:56 -10:00
a7ff562b6e
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:54:05 +00:00
eac3cad041
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:54:00 +00:00
10d2bdb182
Merge pull request #1590 from JChamblee99/master
...
T1548.001 - Added Linux capabilities to SUID tests
2021-08-27 05:53:24 -10:00
13136ba535
Merge branch 'master' into master
2021-08-27 05:50:15 -10:00
9f9d549bf5
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:36:59 +00:00
fb345d8ace
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-27 15:36:54 +00:00
b91a58eecd
Merge pull request #1561 from chdd-ltd/T1056.001
...
T1056.001 - Added 4 Linux tests
2021-08-27 05:36:15 -10:00
bb56e3718d
Merge branch 'master' into T1056.001
2021-08-27 05:23:17 -10:00
Bhavin Patel