52daaeaa35
Fix broken link ( #1034 )
...
Due to 5d7ea5c115clr2of8@gmail.com >
2020-06-19 17:16:37 -06:00
3495fd33a8
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 23:13:53 +00:00
7e989a9ccf
T1547.001: small typo "supicious" -> "suspicious" ( #1036 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 17:13:18 -06:00
c994f3445d
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 23:12:08 +00:00
cab5aa7867
T1543.003: use different service name depending if cmd or psh is used ( #1037 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 17:11:51 -06:00
7d473448df
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:58:17 +00:00
8869067e86
T1053.005: scheduled task creation doesn't require admin ( #1045 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:57:46 -06:00
05bb4f5a71
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:52:02 +00:00
f06013af13
T1140: use different name for 2nd test to allow executing both in sequence ( #1046 )
...
And fix minor bug in cleanup code
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:51:36 -06:00
29a03fd33d
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:50:36 +00:00
923a3beeaf
T1105: add cleanup to tests 7 & 8 ( #1047 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:50:16 -06:00
cea0622f98
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:48:11 +00:00
0376bf02d0
T1197: add cleanup command to test 3 ( #1049 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:47:44 -06:00
b0191df2e7
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:46:37 +00:00
5258767a8e
T1197: use different names for local files of different tests ( #1050 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:46:01 -06:00
726677c8a8
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:28:22 +00:00
60f399cdca
T1105: fix bitsadmin local_path ( #1051 )
...
Absolute path is required
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:28:03 -06:00
a9581378a7
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:24:37 +00:00
609035b803
T1551.001: fix wording ( #1053 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:24:11 -06:00
6bb3c3351d
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:23:26 +00:00
0e29cc757c
T1569.002-1: add cleanup ( #1069 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:22:52 -06:00
ffb170aa83
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:21:43 +00:00
5a5807aba7
T1053.005: execute remotely the cleanup command, after remote creation of scheduled task ( #1070 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-19 16:21:23 -06:00
89f95ec381
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 22:20:31 +00:00
e3dba0cbe2
Pre Req issue fix. ( #1072 )
...
* Check Prereqs error fix
* Check Prereqs error fix in T1046.
* Prereq issue fix.
* Attack command issue fix.
* Extra backslash removed
2020-06-19 16:20:06 -06:00
c77258e6fb
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 16:30:34 +00:00
08a1750179
fix quoting issue ( #1071 )
2020-06-19 10:30:09 -06:00
103a7caebb
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 01:26:55 +00:00
46d03cf5d7
remove unused input arg ( #1066 )
2020-06-18 19:26:20 -06:00
ee9de1db31
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 01:19:01 +00:00
9229441214
executor to bash ( #1061 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-18 19:18:39 -06:00
4b9052957c
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 01:17:50 +00:00
94f4ef0774
correct input arg name ( #1062 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-18 19:17:32 -06:00
85d656775d
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 01:15:35 +00:00
9468c7d87d
fix input arg name ( #1063 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-18 19:15:15 -06:00
8b92674c8b
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 01:13:58 +00:00
755e7e3126
remove unused input arg ( #1064 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-18 19:13:32 -06:00
46d8aa755d
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-19 01:12:47 +00:00
ea1c4e5e92
correct input arg name ( #1065 )
2020-06-18 19:12:27 -06:00
67dad9ece3
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-18 23:52:23 +00:00
d8c37b4f4d
fix double quotes escaping issue ( #1060 )
2020-06-18 17:51:36 -06:00
8a82e9b66a
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-18 01:57:35 +00:00
83dce0dcfa
Fix macOS tests ( #1059 )
...
* Fix macOS tests
* Fix typo in T1574.006
* Replaced zsh with bash, add prereq_command
* Fix test name in T1053.004
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2020-06-17 19:57:14 -06:00
61fab9a7c6
remove markdown files from gitignore ( #1058 )
2020-06-17 19:19:57 -06:00
52e0a089ad
Generate docs from job=validate_atomics_generate_docs branch=master
2020-06-17 23:24:09 +00:00
f8d9b9dee9
spacing change ( #1057 )
2020-06-17 17:23:34 -06:00
24549e3866
Convert to Mitre ATT&CK sub-technique schema ( #1056 )
...
* Initial transfer of atomics to MITRE subtechniques
* Add GUIDs back in, attack_technique to string (#1019 )
* technique to string and add guids back in
* technique to string and add guids back in
* technique to string and add guids back in
* technique to string and add guids back in
* Subtechnique transfer T1220-T1546.005 (#1020 )
* Create T1222.001.yaml
* Create T1222.002.yaml
* Create T1505.002.yaml
* Update T1543.003.yaml
* Update AtomicService.cs
* Update T1546.005.yaml
* Delete T1222.yaml
* Update T1482.yaml
* Update T1485.yaml
* Update T1220.yaml
* Update T1489.yaml
* Update T1490.yaml
* Update T1496.yaml
* Update T1505.003.yaml
* Update T1505.yaml
* Update T1518.001.yaml
* Update T1518.yaml
* Update T1529.yaml
* Update T1543.004.yaml
* Update T1546.001.yaml
* Update T1546.002.yaml
* Update T1546.002.yaml
* Update T1546.001.yaml
* Update T1543.004.yaml
* Update T1543.002.yaml
* Update T1543.001.yaml
* Update T1518.001.yaml
* Update T1546.004.yaml
* Update T1546.003.yaml
* Update T1531.yaml
* Update T1222.001.yaml
* Update T1222.002.yaml
* Update T1505.002.yaml
* Update T1505.003.yaml
* Update T1518.001.yaml
* Update T1543.001.yaml
* Update T1546.005.yaml
* Update T1546.004.yaml
* Update T1546.003.yaml
* Update T1546.002.yaml
* Update T1546.001.yaml
* Update T1543.004.yaml
* Update T1543.003.yaml
* Update T1543.002.yaml
* added auto_generated_guid 1220
* added T1222.001 auto_generated_guid
* Update T1222.002.yaml
added auto_generated_guid entries
* Update T1482.yaml
auto_generated_guid added
* Update T1485.yaml
added auto_generated_guids
* Update T1489.yaml
added auto_generated_guids
* Update T1490.yaml
added auto_generated_guids
* Update T1496.yaml
added auto_generated_guid
* Update T1505.002.yaml
added auto_generated_guid from old T1505 same atomic
* Update T1505.003.yaml
added auto_generated_guid from previous atomic 1100
* Delete T1505.yaml
no longer needed, moved to 1505.002
* Update T1518.yaml
added auto_generated_guids
* Update T1529.yaml
added auto_generated_guids
* Update T1531.yaml
added auto_generated_guids
* Update T1543.001.yaml
added auto_generated_guid
* Update T1543.002.yaml
added auto_generated_guid
* Update T1543.004.yaml
added auto_generated_guid
* Update T1546.001.yaml
added auto_generated_guid
* Update T1546.002.yaml
added auto_generated_guid
* Update T1546.003.yaml
* Update T1546.004.yaml
added auto_generated_guid
* Update T1546.005.yaml
added auto_generated_guid
* add guids back in
* fix spacing issue
* fix spacing
* fix spacing
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
* Sub-techniques T1053-T1113 - Updates (#1022 )
* Sub-techniques T1053-T1113 - Updates
Updated techniques for sub-techniques.
* minor fixes
format fixing
* Added GUIDs
- Added GUIDs back
- Fixed typo (T1054)
- Fixed attack_technique from an array to a string
* Sub-technique updates T1546.008 through T1574.011 (#1024 )
* sub technique updates
* sub technique updates
* sub technique updates
* Carrie updates (#1017 )
* updated T1110,12,13
* updated T1114
* updated T1114
* updated T1115
* updated T1119
* updated T1123,24
* updated T1127
* updated T1114
* updated T1127
* updated T1132
* T1134.004
* T1134.004
* updated T1135
* updated T1136
* updated T1137
* updated T1140
* remove depracted T1153
* updated T1176
* updated T1197
* updated T1201
* updated T1202
* updated T1204
* updated T1207
* updated T1216
* updated T1204
* updated T1217
* updated T1218
* updated T1218
* updated T1219
* updated T1218
* attack_technique to string
* Subtechnique transfer (#1025 )
* T1003 review
* T1005 manual review changes
* T1027.002 sub-technique review
* T1027.004 sub-technique review
* T1036 sub-technique review
* T1037 sub-technique review
* T1048 sub-technique review
* YAML bugfixes
* Adding auto-generated GUIDs back to tests
* merging with Mike's PR
* Merging with Carrie's PR
* fix spacing
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
* Subtechnique fix (#1026 )
* add atomic_tests: element
* add atomic_tests: element
* more fixes
* more fixes
* more fixes
* sub technique minor fixes 1 (#1027 )
* fixes
* fixes
* more fixes
* more fixes
* display name fix (#1028 )
* remove some deprecated stuff. reorganize a little (#1031 )
* Gendocs fix (#1033 )
* gendocs updates for subtechniques
* add folders
* ignore auto generated markdown files
* remove tmp files
* add tmp files
* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer
* navigator layer v3.0
* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer
Co-authored-by: Matt Graeber <60448025+mgraeber-rc@users.noreply.github.com >
Co-authored-by: Tsora-Pop <35981510+Tsora-Pop@users.noreply.github.com >
Co-authored-by: Michael Haag <mike@redcanary.com >
Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-06-17 12:55:46 -06:00
14905c7a16
Merge pull request #1032 from redcanaryco/atomicfriday-06052020
...
Atomic Friday 06052020
2020-06-10 10:19:56 -04:00
13a49af96a
Merge branch 'master' into atomicfriday-06052020
2020-06-10 08:44:55 -04:00
4567926d8a
Merge pull request #1038 from briancdonohue/patch-1
...
"Get Started!" link leads to a 404.
2020-06-10 08:28:32 -04:00
Clément Notin