Commit Graph

91 Commits

Author SHA1 Message Date
Tony M Lambert c3b398e48c Revert "Add Dependencies section to test Yaml and support to use them… (#773)
* Revert "Add Dependencies section to test Yaml and support to use them in the PS execution framework (#772)"

This reverts commit 511bb87af2.

* Generate docs from job=validate_atomics_generate_docs branch=revert-511bb87af29fb302dbd9e85bd93c2c00a47953ba
2020-01-09 09:12:38 -06:00
Carrie Roberts 511bb87af2 Add Dependencies section to test Yaml and support to use them in the PS execution framework (#772)
* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* first draft at dependencies

* lowercase url
2020-01-09 07:36:07 -07:00
Carrie Roberts 5cd5133763 Admin not required to install atomic-red-team (#731)
* no admin required for install

* no admin required for install

* update readme

* update readme

* update readme
2020-01-08 12:45:50 -07:00
FenQiDian ab4c68b970 Execute powershell with "-Command -" arguments. Tell powershell to read scripts from stdin. (#727) 2019-12-17 23:09:02 -07:00
Micheal Fleck de8df502af T1518 software discovery added test, cleanup (#718)
* New test, spelling fix

Added a test for all software installed and minor spelling fix

* Spelling
2019-12-16 14:20:02 -07:00
Carrie Roberts b85fe323b8 fix default PathToAtomicsFolder (#719) 2019-12-11 19:20:00 -07:00
Fabricio Brunetti 8b61643f7f Python framework: Fix multiline powershell scripts (#706)
This fix is for many powershell based tests that have multiple lines, often setting variable names (some of them are T1101, T1098, T1084 and many more).
2019-12-03 12:49:57 -07:00
Carrie Roberts 3d06083dbe -ShowDetails without adding '-InformationAction Continue' (#686)
* ShowDetails without -InformationAction Contnue

* ShowDetails without -InformationAction Contnue

* ShowDetails without -InformationAction Contnue
2019-11-25 11:28:08 -06:00
Fabricio Brunetti 24415af3bb Python execution framework fix: use any value type (#691)
* Python execution framework fix: use any value type

This change removes the function convert_to_right_type.
Currently whenever a new parameter type is added (i.e. T1058 uses type "registry"), Python script runner crashes with "An error occurred while running the suite. Value type registry does not exist!".  This wouldn't be a problem if the convert_to_right_type function did some real validation but as it stands today the function convert_to_right_type doesn't really do anything (except for casting integers into strings). If a type that needs some serious validation/conversion ever comes up the function may be reinstated.

* Deleting convert_to_right_type function
2019-11-25 10:10:55 -07:00
Andras32 1b05ec3b29 Added Hostname to ExecutionLog (#688)
* Added Hostname to ExecutionLog

* added username
2019-11-22 12:57:29 -07:00
Carrie Roberts 8b64037681 remove atomic-red-team-master folder from install (#689)
* remove extra atomic-red-team-master folder for install

* remove extra atomic-red-team-master folder for install
2019-11-22 11:57:30 -07:00
Fabricio Brunetti a49e529a34 Leverage PathToAtomicsFolder in Python framework (#675)
Parsing the command to replace PathToAtomicsFolder variable.
Can-t use environment variables as some Powershell based tests use "$PathToAtomicsFolder".
I admit that it-s a bit hackish but I think it-s the most straightforward way to handle this without going through a major refactor of this framework
2019-11-19 15:20:59 -07:00
Carrie Roberts c86cb7ddbf a little bug fix (#665)
* a little bug fix

* remove invoke call at the end
2019-11-15 07:05:02 -07:00
san-gwea 33d20ffb7c show executor and privilege requirement (#662) 2019-11-14 21:59:12 -07:00
fabamatic 3311f02362 Adding .yaml integer parser to python runner (#639)
This change is to be able to execute tests contained in T1055.yaml and T1071.yaml. Will also cover any future tests that may use that data type as argument.
2019-11-14 20:43:41 -07:00
Andras32 e7e3b5f343 ++ before check (#650) 2019-11-12 13:16:04 -07:00
Andrew Beers c3183a36fa remove development section, Carrie's new instructions cover it (#638) 2019-11-12 00:21:34 -07:00
derekenjibowden c6ea937fb4 Fix show details bug (#647)
check prereqs with -showdetails was executing the prereq command instead of showing the details
2019-11-11 23:26:33 -07:00
Andras32 6c3da68741 Multi platform invoke art (#641)
* Non-Windows OS Support

Added OS Identification to determine tests to run
Added SH and Bash executors for Linux and MacOS
Changed some Print statement oddities in ART
Updated Installation script to work on non-windows machines

* Updated Documentation

Edited the readme to be more OS neutral
Added information for the -force option in the installer
Added instructions for downloading powershell core on Mac and Linux

* Last Bugs

added chown to install script

* Install -force test install path

if (Test-Path $InstallPath){ Remove-Item -Path $InstallPath -Recurse -Force -ErrorAction Stop | Out-Null }

* minor changes 

Write-Host error messages
Installer - Import-Module $modulePath -Force

* Chown weird on MacOS

chown -R $env:SUDO_USER $InstallPath

* README edits

clearing up $home $homedrive shenanigans

* \n in mardown issues

* Readme edits #2
2019-11-11 14:26:23 -07:00
Andrew Beers 8e8222e06a add invoke-atomictest to main page readme (#629)
* add invoke-atomictest to main page readme

* add instructions for running it more smoothely when cloned form github

* Update README.md

* Update README.md
2019-11-10 19:53:12 -06:00
Tony M Lambert 6ea465cf61 Fixed URL for Install-AtomicRedTeam (#632) 2019-11-10 18:43:28 -07:00
Carrie Roberts a611d8926b Expanding the Execution Frameworks Read me (#619)
* updating execution-frameworks readme

* updating execution-frameworks readme
2019-11-08 11:59:05 -06:00
Carrie Roberts ed5f9deccc remove deprecated code (#620) 2019-11-08 11:58:07 -06:00
Carrie Roberts c53e73ed96 Readme documents required Import-Module command (#622)
* notes on importing module

* notes on importing module
2019-11-08 11:57:08 -06:00
Carrie Roberts d73dc8f041 fix bug: returns null except on PS Core or PS v7 (#624) 2019-11-08 11:56:01 -06:00
Carrie Roberts 49ccc8e366 new default PathToAtomicsFolder value (#623)
* new default PathToAtomicsFolder value

* better way to handle custom default path to atomics

* better way to handle custom default path to atomics
2019-11-08 11:50:31 -06:00
Carrie Roberts 9bcb47ed3e warn if running admin test without admin (#616) 2019-11-06 14:07:27 -07:00
Carrie Roberts e68527d975 PathToAtomicsFolder Input Parameters auto-replaced with actual path (#613) 2019-11-06 12:53:20 -07:00
Carrie Roberts c903c6c00e log minutes correctly (#591) 2019-10-21 15:03:09 -06:00
Carrie Roberts 3d839e7bd6 handle spaces in input param defaults (#590) 2019-10-21 15:02:04 -06:00
Andras32 0197987d18 Added MacOS and Linux isElevated check [todo: test MacOS] (#565)
* Added MacOS and Linux isElevated check [toso: test MacOS]

* Update Invoke-AtomicTest.ps1

* Update Invoke-AtomicTest.ps1

* Update Invoke-AtomicTest.ps1
2019-09-17 13:11:19 -06:00
Carrie Roberts 3c644cc523 installer cleanup (#560) 2019-09-12 15:02:29 -06:00
Carrie Roberts 30411b7db8 rename InputParameters to InputArgs (#558) 2019-09-06 19:36:02 -06:00
Carrie Roberts 3b784d023c readme updates/fixes (#557) 2019-09-06 11:28:13 -06:00
Carrie Roberts 0110ceec98 pipe file creation output to out-null (#556) 2019-09-05 17:38:54 -06:00
Carrie Roberts 06c3bb433a fix null error when using -Cleanup and -ShowDetails (#555) 2019-09-05 17:37:48 -06:00
Carrie Roberts 91a5f29006 remove Z from Local timestamp (#554) 2019-09-05 16:21:09 -06:00
Carrie Roberts 516855f4e7 fix bug where no log output for tests with input parameters (#553) 2019-09-05 15:27:39 -06:00
Carrie Roberts dbbec18625 bug fix for order of operations (#552) 2019-09-05 09:44:52 -06:00
Carrie Roberts 968bf887c2 fail pre-req check if elevation required but not provided (#549)
* add InputParameters example

* fail pre-req check if elevation required but not provided

* fail pre-req check if elevation required but not provided

* fail pre-req check if elevation required but not provided
2019-09-04 10:52:24 -06:00
Carrie Roberts d7f2290669 allow caller to specify non-default input parameters (#547) 2019-09-03 19:29:04 -06:00
Carrie Roberts 749039f3b9 Remove Invoke-AllAtomicTests (#540)
* use 'Invoke-AtomicTest All' instead of 'Invoke-AllAtomicTest'

* removing some outdated examples

* removing the older documentation
2019-08-30 22:05:14 -06:00
Carrie Roberts 96d882444d Write test execution details to log file (#539) 2019-08-30 12:16:53 -06:00
Carrie Roberts 019b63fdb5 Support for CheckPrereqs and Cleanup Commands (#531)
* Support for CheckPrereqs and Cleanup Commands

* for powershell executor, report prereqs are met if no prereq_commands are given

* remove invoke call from end of file, commited accidentally
2019-08-30 09:42:44 -06:00
Carrie Roberts ac0546a494 Specify TTP as string, no need to call Get-AtomicTechnique first. Optionally specify individual attacks by atomic test # or name. (#525) 2019-08-27 20:32:00 -06:00
Michael Haag 26c8eae322 Install Atomic - Fixed Paths (#517)
I reverted https://github.com/redcanaryco/atomic-red-team/issues/478 for the moment. @caseysmithrc and I will update the script to remove the `atomic-red-team-master` path. This will at least get you up and running today.

Issue #516
2019-08-14 10:36:16 -06:00
Michael Haag a29708a7a3 install-atomicredteam Updates (#498)
* Updated URL location

* fixed url

again

* Updated InstallPath

Updated install path for issue #478
2019-05-10 13:38:02 -06:00
Michael Haag 5f49684c43 Install fixes (#462)
* Install fixes

Updated casing. Should be happier

* fix docs-invoke page

Fixing docs invoke page to match the other readme
2019-03-26 13:13:05 -07:00
Zac Brown 80e983e3d9 Update PyYAML to >= 4.2b1 due to security alert: https://nvd.nist.gov/vuln/detail/CVE-2017-18342 (#474) 2019-03-26 11:52:59 -06:00
Michael Haag 7e34cbe7df ART - Getting Started Made Easy (#459)
* New Guide + Execution Script

Commit of new script and guide!

* Updated ReadMe

Updated Readme with new instructions

* Fixed typos

Typo gone and ready!
2019-02-14 13:13:13 -08:00