4a88d86da6
Update T1069.001.yaml
2023-04-02 19:21:34 -07:00
09bfb24ffd
Update T1069.001.yaml
2023-04-02 19:20:44 -07:00
45fdf3f615
Create test.sh
2023-04-02 19:13:42 -07:00
1b00162178
Create Dockerfile
2023-04-02 19:13:12 -07:00
7ff7030e75
Update T1069.001.yaml
2023-04-02 19:12:05 -07:00
77ee1faed2
Update generate-counter.yml ( #2392 )
...
ci was failing due to wrong python version
2023-03-29 08:42:05 -06:00
0f385304fb
Add total count ( #2390 )
...
* add counter parts
* adding readme updated
* updating counter
2023-03-28 08:38:27 -06:00
63bd86ad84
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-28 12:52:06 +00:00
09bf62f3e6
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-28 12:51:44 +00:00
a7863b2d41
Merge pull request #2391 from 0xzeta/patch-1
...
Added new test - Enabling Remote Desktop Protocol via Remote Registry (T1112)
2023-03-28 08:50:20 -04:00
ff51371575
Update T1112
...
Added new technique "Enabling Remote Desktop Protocol via Remote Registry"
2023-03-28 14:28:40 +07:00
eff6370693
add counter parts ( #2389 )
2023-03-27 16:23:55 -06:00
b68a0b6cd7
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-23 23:27:28 +00:00
49e69856a0
T1070.006 create prereqs for mac/linux timestomp ( #2387 )
2023-03-23 17:26:37 -06:00
004e042089
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-23 14:47:57 +00:00
869420c151
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-23 14:47:38 +00:00
844d2be02b
Two Atomics and a Pear Tree ( #2384 )
...
Co-authored-by: Paul <78918118+burning-pm@users.noreply.github.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-03-23 08:47:03 -06:00
0c153fd334
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-23 14:42:04 +00:00
e1a9f47d8d
T1070.004 add prereqs for linux/mac file/folder ( #2383 )
...
Co-authored-by: Ari-Weinberg <ariweinberg326@gmail.comm >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-03-23 08:41:17 -06:00
7e1e98a425
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-23 14:34:18 +00:00
5ed527744c
Update T1087.002 Test 17 ( #2386 )
...
* Update T1087.002.yaml
* Update T1087.002.yaml
fix cleanup command from Get-Item to Remove-Item
2023-03-23 08:33:18 -06:00
b96d64bfd8
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-22 22:58:34 +00:00
935bc9dd9d
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-22 22:58:18 +00:00
26453dc7f0
Merge pull request #2334 from D4rkCiph3r/patch-3
...
Added new tests (T1562) - macOS
2023-03-22 18:57:48 -04:00
0b76900b8a
Merge branch 'master' into patch-3
2023-03-22 18:57:05 -04:00
a1aaef3294
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-22 22:32:09 +00:00
517271c38f
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-22 22:31:53 +00:00
98c87c0925
Merge pull request #2333 from D4rkCiph3r/patch-2
...
Added new tests - T1070.002 (macOS and Linux)
2023-03-22 18:31:22 -04:00
8a39735611
Merge branch 'master' into patch-2
2023-03-22 18:30:40 -04:00
59f8c86459
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-22 22:30:32 +00:00
972860b5b6
Merge branch 'master' into patch-2
2023-03-22 18:30:18 -04:00
2de9b1aa45
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-22 22:30:15 +00:00
8c45fa1a75
Merge pull request #2332 from D4rkCiph3r/patch-1
...
Added new test case - T1027.001
2023-03-22 18:29:43 -04:00
4fbe3256d8
Merge branch 'master' into patch-1
2023-03-22 18:28:49 -04:00
e9ea0880cb
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-20 22:21:10 +00:00
8c4cb3229c
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-20 22:20:55 +00:00
74f69e9797
Added test "Discover Specific Process - tasklist" ( #2373 )
...
* Added test "Discover Specific Process - tasklist"
This test is meant to simulate process discovery activity that targets specific process names. The default process here is lsass to simulate what is seen in https://www.whiteoaksecurity.com/blog/attacks-defenses-dumping-lsass-no-mimikatz/ .
* Update T1057.yaml
removed guid
---------
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-03-20 16:20:28 -06:00
41355dea4e
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-20 19:39:02 +00:00
8a83c877bb
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-20 19:38:46 +00:00
29063f5306
Added RemCom to execute a command on a remote host ( #2380 )
...
* Added RemCom to execute a command on a remote host
* Update T1569.002.yaml
---------
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com >
2023-03-20 13:38:17 -06:00
62307f5d7b
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-20 15:12:10 +00:00
f0a94f763b
Update T1564.yaml ( #2379 )
2023-03-20 09:07:47 -06:00
b1871b8273
Update T1070.002.yaml
...
Updated names and descriptions of the atomic tests.
Added few references and comments.
Updated few atomic tests.
Re-ordered macOS and linux tests for better organisation.
2023-03-18 10:20:14 +05:30
0f0cdf35ab
Update T1562.yaml
...
Updated the atomic test(#1 , #2 ) name and description.
Added clean-up commands.
2023-03-18 09:07:34 +05:30
9171dda6f3
Merge branch 'master' into patch-1
2023-03-18 08:27:30 +05:30
4b2ddac423
Update T1027.001.yaml
...
Updated the test descriptions for atomic test #1 and #2 .
2023-03-18 08:22:10 +05:30
c967af1060
Generated docs from job=generate-docs branch=master [ci skip]
2023-03-17 20:40:08 +00:00
cc36afc188
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-03-17 20:39:52 +00:00
0496bcb379
Merge pull request #2362 from m4nbat/gk-atomic-red-team-T1531-Account-Deletion
...
Gk atomic red team t1531 account deletion
2023-03-17 15:38:50 -05:00
bd9dde39e2
Merge branch 'master' into gk-atomic-red-team-T1531-Account-Deletion
2023-03-17 15:37:18 -05:00
well123cs