47babe02e4
emulating this malware from blog
2023-06-16 19:09:27 -05:00
0f229c0e42
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-16 03:55:19 +00:00
6ce797c851
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-06-16 03:55:01 +00:00
98bcc73b89
Add T1036.004 linux test rename process comm using prctl PR_SET_NAME ( #2458 )
...
* Add T1036.004 linux test rename process comm using prctl PR_SET_NAME
* fixing test to work with invoke-atomic
---------
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2023-06-15 23:54:21 -04:00
2b77bcb303
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-15 22:33:14 +00:00
a8fe2d2d77
mv adfind to bin ( #2465 )
...
* move adfind to external resource
* mv adfind to bin
2023-06-15 16:32:13 -06:00
282a250cc9
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-15 21:42:03 +00:00
32a4415e43
move adfind to external resource ( #2464 )
2023-06-15 15:40:50 -06:00
868f5477f6
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-15 19:53:19 +00:00
586818a01f
use ExternalPayloads folder ( #2462 )
...
* use ExternalPayloads folder
* psexec as external dependency
* psexec as external dependency
2023-06-15 13:52:16 -06:00
7a430d5794
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-15 19:00:19 +00:00
186b743391
Update T1553.005.yaml ( #2463 )
...
ISO would mount but was not able to run the .exe. I fixed it. Now it works!
2023-06-15 12:59:17 -06:00
84215139ee
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-15 16:29:11 +00:00
db1a2cf461
removing: Disable Defender with Defender Control ( #2461 )
2023-06-15 10:28:12 -06:00
cef46e4479
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-15 16:17:12 +00:00
068d32b1ea
use ExternalPayloads directory ( #2460 )
...
* use ExternalPayloads directory
* use ExternalPayloads directory
* use ExternalPayloads directory
2023-06-15 10:16:12 -06:00
199dd7f85d
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-14 20:25:05 +00:00
3e4e817aa4
Add ExternalPayloads folder for downloaded prerequisites ( #2459 )
...
* use ExternalPayloads folder for prereqs
* git ignore ExternalPayloads folder
* move External folder up one directory
2023-06-14 14:24:03 -06:00
085b3ec2c9
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-14 00:21:58 +00:00
855857d46b
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-06-14 00:21:36 +00:00
a6889a0c82
Merge pull request #2396 from D4rkCiph3r/D4rkCiph3r-T1486
...
Added 3 new tests - macOS T1486
2023-06-13 17:20:34 -07:00
6d08edbdf0
Update T1486.yaml
2023-06-13 17:19:05 -07:00
f7f5761ccf
Update T1486.yaml
...
CI fixes
2023-06-13 17:17:54 -07:00
3738aed0eb
Merge branch 'master' into D4rkCiph3r-T1486
2023-06-13 17:12:10 -07:00
eaba80503f
Update T1486.yaml
2023-06-13 17:10:41 -07:00
38687e45ad
Update T1486.yaml
...
updated prereqs for two tests, remove ccrypt test since it does not work with art and testing
2023-06-13 17:10:04 -07:00
d8c164d3e6
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-10 05:19:16 +00:00
65c5514899
Merge pull request #2452 from amalone-scwx/am_args
...
parameterize T1070.002 tests
2023-06-10 01:18:17 -04:00
d22b91cde8
Merge branch 'master' into am_args
2023-06-10 01:15:53 -04:00
49e9c5e04e
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-09 22:36:42 +00:00
d025cb21db
Merge pull request #2451 from cnotin/pr-remove-pfx-export
...
No need to export the PFX to get the public certificate, so removed it
2023-06-09 15:35:48 -07:00
0d9659b915
Merge branch 'master' into pr-remove-pfx-export
2023-06-09 15:34:37 -07:00
546ed5ea1e
backout changes to log -f
2023-06-09 13:05:25 -07:00
43ee8b0926
Merge branch 'master' into am_args
2023-06-09 01:22:19 -04:00
05fbaf32c9
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-09 05:20:32 +00:00
d0660c50b6
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-06-09 05:20:12 +00:00
f1d348c75f
Merge branch 'master' into am_args
2023-06-09 01:20:06 -04:00
0884a9ea9e
Merge pull request #2455 from traceflow/master
...
adding new test in T1176 - Load unpacked extension with command line
2023-06-09 01:19:18 -04:00
d8580af708
Fix indentation
2023-06-09 01:15:22 -04:00
5c0e27d906
Merge branch 'master' into am_args
2023-06-09 00:40:10 -04:00
dab845d335
adding new test in T1176 - Load unpacked extension with command line
2023-06-08 19:37:24 +00:00
5428e3bf1e
adding new test in T1176 - Load unpacked extension with command line
2023-06-06 18:55:08 +00:00
cee7f2ab5e
adding new test in T1176 - Load unpacked extension with command line
2023-06-06 18:51:22 +00:00
aa3e4cea3e
adding new test in T1176 - Load unpacked extension with command line
2023-06-06 17:48:05 +00:00
a7cc448291
arg types lowercase string
2023-06-05 20:32:06 -07:00
4a36531a81
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-05 20:03:18 +00:00
0d6f954bf4
Merge pull request #2437 from cyberbuff/t1078_tf
...
Update T1078.004
2023-06-05 13:02:18 -07:00
880da0b732
Merge branch 'master' into t1078_tf
2023-06-05 13:01:15 -07:00
4fc3b697d1
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-05 19:58:44 +00:00
9743e496f6
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-06-05 19:58:27 +00:00
Carrie Roberts