security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,501 Commits 47 Branches 0 Tags
433c20fecb2ee460d00a1e311d89a6f57622c28c
Commit Graph

3501 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
CircleCI Atomic Red Team GUID generator 433c20fecb Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 22:00:20 +00:00
Bhavin Patel 1d75fda8df Command and Scripting Interpreter: Bash - 2 new atomics (#1766) 
* AutoSUID exeuction

* updates to rpre reg

* linenum tool

* minor

* uuid

* remove uuid
 2022-02-07 14:59:53 -07:00
CircleCI Atomic Red Team doc generator ccb98851fe Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:33:54 +00:00
CircleCI Atomic Red Team GUID generator 872d256108 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:33:49 +00:00
Leo Verlod 58ecf3b2c0 Adding T1562.001 Test 27 - Disable Defender with Defender Control (#1765) 
* Adding T1562.001 Test 27 - Disable Defender with Defender Control

This test is designed to disable Windows Defender with the "Defender Control" freeware.

* Updating T1562.001 Test 27 for Efficiency

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-02-07 08:33:33 -07:00
CircleCI Atomic Red Team doc generator da23e1e4b3 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:30:23 +00:00
CircleCI Atomic Red Team GUID generator 0e2c45bc4a Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:30:15 +00:00
Kelsey Seymour 20bb31380d Addition of T1546.015 (#1764) 
* Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

* Revert "Addition of T1546.015"

This reverts commit c6442f7526f84820ac12f5a3a3934f39dcc98c1d.

* Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

* Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

Revert "Addition of T1546.015"

This reverts commit c6442f7526f84820ac12f5a3a3934f39dcc98c1d.

Addition of T1546.015

Details:
Creation of T1546.015 - COM Hijacking

Testing:
W10 Build 19044.1466

Associated Issues:
None found

* Proper DLL

Noticed older version uploaded.  This is the proper one, and matched to AtomicTest.cpp

* update dll url and leave dll on disk

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-02-07 08:29:34 -07:00
CircleCI Atomic Red Team doc generator 742483f51c Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:05:14 +00:00
CircleCI Atomic Red Team GUID generator 8443011f02 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-07 15:05:09 +00:00
lucasRiley e029a0734d T1036 (#1763) 
* T1036

* Update T1036.yaml

* updated description

* correct outfile param

* Add -force to avoid error msg

* update zip url

Co-authored-by: Riley <lriley@NTI.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-02-07 08:04:43 -07:00
CircleCI Atomic Red Team doc generator effcf8b023 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-05 02:53:33 +00:00
CircleCI Atomic Red Team GUID generator 3e31df7f38 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-05 02:53:26 +00:00
Rimsha3108 b63dbfa127 T1218.011_update (#1761) 
Co-authored-by: Rimsha Alam <ralam@nti.local>
 2022-02-04 20:52:52 -06:00
CircleCI Atomic Red Team doc generator b5c2dc6f78 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 18:25:24 +00:00
CircleCI Atomic Red Team GUID generator 150b02825d Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 18:25:18 +00:00
Michael Haag 5eecde1f27 DSInternals - Get-ADReplAccount (#1760) 2022-02-04 12:24:57 -06:00
CircleCI Atomic Red Team doc generator 4173795808 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:35:07 +00:00
CircleCI Atomic Red Team GUID generator 883151e2b7 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:35:01 +00:00
frack113 57c097aac0 Add phant0m test (#1759) 
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-02-04 09:34:34 -06:00
CircleCI Atomic Red Team doc generator 422699b556 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:23:19 +00:00
CircleCI Atomic Red Team GUID generator 02653f0263 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-04 15:23:13 +00:00
frack113 c9788df1c1 T1555.003 edge (#1758) 
* Add T1555.003 Egde

* fix cleanup
 2022-02-04 09:22:41 -06:00
CircleCI Atomic Red Team doc generator 6835dffd2e Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-03 17:54:53 +00:00
CircleCI Atomic Red Team GUID generator a870578ef4 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-03 17:54:46 +00:00
Bhavin Patel 5f8d08b7db Merge pull request #1748 from WojciechLesicki/master 
T1098 - adding user and service principal to both Azure AD role and Azure role.
 2022-02-03 09:54:23 -08:00
Bhavin Patel 0e0df960e5 Merge branch 'master' into master 2022-02-03 09:52:28 -08:00
CircleCI Atomic Red Team doc generator 454ad2308d Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-02 16:27:57 +00:00
CircleCI Atomic Red Team GUID generator aeaded3b08 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-02-02 16:27:51 +00:00
nsher07 f9c2a9b69e New Atomic T1543.003 Tiny Turla Backdoor Service w64time (#1756) 
* Update T1543.003.yaml

Atomic - T1045.003 - TinyTurla backdoor service w64time
It's running Dll as service to emulate the tine turla backdoor

* Create W64Time.cpp

* The Dll file for T145.003 Tiny Turla

* Fixed YAML syntax

* add blog link to description

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-02-02 10:27:20 -06:00
Marrelle Bailey (She/Her) 98c5936be2 Taking out the work covenant (#1754) 
deleting a word from the title
 2022-02-01 10:49:25 -06:00
Wojciech Lesicki cdb8cbe726 Merge branch 'master' into master 2022-02-01 00:50:38 +01:00
CircleCI Atomic Red Team doc generator 5e043ef568 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 22:59:43 +00:00
Jose Enrique Hernandez 5b28237584 Add links to navigator (#1752) 
* added link object, removed comments

* only adds links when parent technique actually has a yaml

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-01-31 16:59:15 -06:00
CircleCI Atomic Red Team doc generator ebe64397be Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 20:33:23 +00:00
Jose Enrique Hernandez 355d170d62 added link object, removed comments (#1751) 2022-01-31 14:32:50 -06:00
CircleCI Atomic Red Team doc generator 6190062a52 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 19:14:49 +00:00
CircleCI Atomic Red Team GUID generator 152d4e5926 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 19:14:44 +00:00
frack113 4843c6212a Add firefox profile (#1750) 2022-01-31 13:14:24 -06:00
CircleCI Atomic Red Team doc generator 87b786fc7e Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 16:56:12 +00:00
Leo Verlod 58615ef861 Automating getprereqs and fixing prereq errors for T1087.001 Test 5 (#1749) 
* Automating getprereqs and fixing prereq errors for T1087.001 Test 5

Updating T1087.001 Test 5 to automatically install the login package that contains lastlog, as well as resolving an issue with its prereqs that results in an unexpected eof error.

* add original guid back in

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-01-31 10:55:54 -06:00
CircleCI Atomic Red Team doc generator d2fe61bf55 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-31 16:52:15 +00:00
frack113 be58951361 T1550.002 fix test 2 (#1747) 
* fix test 2

* fix crackmapexec
 2022-01-31 10:51:40 -06:00
WojciechLesicki 901633f873 Removing auto_generated_guid 2022-01-31 00:54:57 +01:00
WojciechLesicki bb9e9f3796 again...correcting list 2022-01-30 23:21:19 +01:00
WojciechLesicki 65560d2572 correcting the name of the test #7 2022-01-30 23:18:31 +01:00
WojciechLesicki 45a06e42db Adding new atomics to the list 2022-01-30 23:17:00 +01:00
WojciechLesicki d3548bd62e T1098 - adding some Azure atomics 2022-01-30 23:13:58 +01:00
CircleCI Atomic Red Team doc generator 51e66c9ab6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-29 19:20:49 +00:00
CircleCI Atomic Red Team GUID generator 8863882725 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-01-29 19:20:42 +00:00