security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,840 Commits 47 Branches 0 Tags
7d311f19f1394de014e2e504a5052128e63351b1
Commit Graph

76 Commits

Author SHA1 Message Date
Atomic Red Team doc generator e9b9f2ed7b Generated docs from job=generate-docs branch=master [ci skip] 2024-02-26 15:24:49 +00:00
Jake H edea906548 Implementation of venv into Windows Python atomics (#2703) 
* Improve pip handling (#1)

* virtual env added to T1018, tested and confirmed working

* virtual env added to T1003.001, tested and confirmed working

* virtual env added to T1555.003, tested and confirmed working

* Removing pip-autoremove installation as not required

* updating atomics count in README.md [ci skip]

---------

Co-authored-by: Hare Sudhan <code@0x6c.dev>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
Co-authored-by: publish bot <opensource@redcanary.com>
 2024-02-26 09:19:26 -06:00
Atomic Red Team doc generator 669e685b8d Generated docs from job=generate-docs branch=master [ci skip] 2024-02-08 21:29:25 +00:00
Jake H a4653ac9b5 Updating get_prereq_command to download and install python3 & pip (#2680) 
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2024-02-08 15:28:39 -06:00
Atomic Red Team doc generator 88d1fbb51d Generated docs from job=generate-docs branch=master [ci skip] 2023-11-20 03:11:31 +00:00
Atomic Red Team GUID generator 0a6beebd6c Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-11-20 03:11:16 +00:00
Swachchhanda Shrawan Poudel 3ae37eaeb0 Lsass memory dump via SilentProcessExit technique (#2611) 
* Lsass memory dump via SilentProcessExit technique

* fix yaml

---------

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2023-11-19 22:10:35 -05:00
Atomic Red Team doc generator 8b50a4ffab Generated docs from job=generate-docs branch=master [ci skip] 2023-10-12 03:26:27 +00:00
Carrie Roberts 0f62633232 catch failed download and exit (#2563) 
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
 2023-10-11 21:25:25 -06:00
Atomic Red Team doc generator 5e4a0cea17 Generated docs from job=generate-docs branch=master [ci skip] 2023-10-03 17:49:04 +00:00
Atomic Red Team GUID generator 34e755969e Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-10-03 17:48:44 +00:00
Swachchhanda Shrawan Poudel 9026f98900 Added few new tests for T1518.001 and also rdrleakdiag.exe test accessing lsass (#2550) 
* Added lolbin rdrleakdiag support for lsass dumping and some Security Software Discovery tests

* Changes done as suggested

---------

Co-authored-by: Hare Sudhan <code@0x6c.dev>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2023-10-03 11:48:00 -06:00
Atomic Red Team doc generator a228ee8656 Generated docs from job=generate-docs branch=master [ci skip] 2023-09-22 19:15:21 +00:00
Carrie Roberts d4709021fb Handle spaces in file paths (#2535) 
* updating atomics count in README.md [ci skip]

* wip

* handle spaces in path

* update readme

* fix typo

---------

Co-authored-by: publish bot <opensource@redcanary.com>
 2023-09-22 10:47:25 -06:00
Atomic Red Team doc generator ac64299bcc Generated docs from job=generate-docs branch=master [ci skip] 2023-09-19 19:37:14 +00:00
final five three fantasy e1fa1bfd42 fixed some path errors (#2533) 
* Repair path error

* Repair path error

---------

Co-authored-by: ywliang <ywliang@Hillstonenet.com>
 2023-09-19 13:35:57 -06:00
Atomic Red Team doc generator cef46e4479 Generated docs from job=generate-docs branch=master [ci skip] 2023-06-15 16:17:12 +00:00
Carrie Roberts 068d32b1ea use ExternalPayloads directory (#2460) 
* use ExternalPayloads directory

* use ExternalPayloads directory

* use ExternalPayloads directory
 2023-06-15 10:16:12 -06:00
Atomic Red Team doc generator cb29aa596f Generated docs from job=generate-docs branch=master [ci skip] 2023-05-31 21:08:41 +00:00
Carrie Roberts 35c539e776 move PS1 to src (#2443) 
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
 2023-05-31 15:07:35 -06:00
Atomic Red Team doc generator 03e04d3994 Generated docs from job=generate-docs branch=master [ci skip] 2023-05-31 21:04:38 +00:00
Carrie Roberts bf2a19d672 handle null value in prereq (#2442) 
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
 2023-05-31 15:03:42 -06:00
Atomic Red Team doc generator a59de488ff Generated docs from job=generate-docs branch=master [ci skip] 2023-05-31 20:51:23 +00:00
KillrBunn3 65294196d0 Spelling adjustments (#2448) 
Looking over the YAMLs mostly, only changes for readability or accuracy
 2023-05-31 15:50:22 -05:00
Atomic Red Team doc generator b1f3c968f2 Generated docs from job=generate-docs branch=master [ci skip] 2023-05-19 17:06:33 +00:00
Atomic Red Team doc generator 16594d72c5 Generated docs from job=generate-docs branch=master [ci skip] 2023-02-13 23:11:19 +00:00
Josh Rickard a5dd0813cd fix: Updating atomics YAML file structure to align with the new JSON schema definition (#2323) 
* fix: Updating atomics YAML file structure to align with the new JSON schema definition.

This also fixes some white space issues and general line formatting across all impacted atomics.

* fix: One additional change needed

---------

Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2023-02-13 16:10:37 -07:00
Atomic Red Team doc generator 757c6b6513 Generated docs from job=generate-docs branch=master [ci skip] 2023-01-11 23:53:02 +00:00
Carrie Roberts 44ce87e92e add prereqs and simplify (#2269) 2023-01-11 16:52:34 -07:00
Atomic Red Team doc generator 09bc35dea1 Generated docs from job=generate-docs branch=master [ci skip] 2022-09-26 17:40:43 +00:00
Carrie Roberts 869f7e880d mimi prereq fixes (#2163) 
* mimi prereq fixes

* fix url to helper
 2022-09-26 11:40:00 -06:00
Atomic Red Team doc generator d0dad62dbc Generated docs from job=generate-docs branch=master [ci skip] 2022-09-23 22:57:18 +00:00
CircleCI Atomic Red Team doc generator 7091fa8b16 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-04-01 14:37:00 +00:00
CircleCI Atomic Red Team doc generator 2e26916147 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2022-03-21 22:34:50 +00:00
Carrie Roberts 30177c92f8 delete broken wce test (#1822) 2022-03-21 16:33:53 -06:00
CircleCI Atomic Red Team doc generator 8985aaf0f0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-12-09 18:42:48 +00:00
Carrie Roberts 5bb5878e62 Cleaning up the Cleanup commands (#1685) 
* cleanup fixes

* cleanup fixes

* cleanup fixes
 2021-12-09 11:42:14 -07:00
CircleCI Atomic Red Team doc generator 9d99436432 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-16 16:09:02 +00:00
CircleCI Atomic Red Team GUID generator 3101f0225d Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-16 16:08:57 +00:00
Carrie Roberts 64b06bc2dc Add lsass dump via NanoDump atomic (#1670) 
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
 2021-11-16 09:08:26 -07:00
CircleCI Atomic Red Team doc generator bc21f59ff0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-09-04 00:21:31 +00:00
Josh Rickard 1513717eb2 Updating atomics to conform to standard (#1619) 
* Updated format of input_argument types for Url

* Updated type for input_arguments to Url (missed)

* Updating Path type for input_arguments

* Updated String type for input_arguments

* Missed a few Strings and Url types

* Updated default values for input_arguments to align with their types

* Updated Integer type for input_arguments

* Updated formatting and spacing of atomics
 2021-09-03 18:20:46 -06:00
CircleCI Atomic Red Team doc generator b10fa043d1 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-08-23 21:09:34 +00:00
Arioch 50e36cb7e7 Update hardcoded Mimikatz releases download URLs (#1604) 
* update references to hardcoded mimikatz releases

* update invoke-webreauest parameters

* apply -UseBasicParsing consistently to Invoke-WebRequest calls

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-08-23 15:08:54 -06:00
CircleCI Atomic Red Team doc generator 36d49de4c8 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 17:04:33 +00:00
CircleCI Atomic Red Team doc generator 575b36a8e6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 15:16:54 +00:00
CircleCI Atomic Red Team doc generator 88ad3fd322 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-16 18:41:22 +00:00
SecurityShrimp 42799b033d added TLS/SSL v1.2 enabling commands to any atomic test utilizing IWR (#1519) 
* Update T1204.002.md

Added lines to each test using IWR for invoke-webrequest to set the acceptable TLS versions for the commands to complete successfully by prepending the tests with 

```[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12```

* Update T1555.yaml

added line to set ssl/tls version

* Update T1134.001.yaml

updated IWR lines to allow ssl/tls version 1.2

* Update T1069.002.yaml

added lines to every IWR instance to set ssl/tls version to 1.2

* Update T1558.003.yaml

added line to allow TLS/SSL 1.2

* Update T1033.yaml

added command to enable SSL/TLS v1.2

* Update T1055.012.yaml

added command to enable TLS/SSL v1.2

* Update T1115.yaml

Added command to enable SSL/TLS v1.2

* Update T1070.001.yaml

added command enabling SSL/TLS v 1.2

* Update T1564.yaml

added commands to enable SSL/TLS v 1.2

* Update T1566.001.yaml

added command to enable SSL/TLS V1.2

* Update T1135.yaml

added command to enable SSL/TLS v1.2

* Update T1055.yaml

added commands to enable TLS/SSL v 1.2

* Update T1110.003.yaml

added command to enable TLS/SSL v1.2

* Update T1003.yaml

Added command to enable TLS/SSL v1.2

* Update T1053.005.yaml

added command to enable TLS/SSL v1.2

* Update T1003.001.yaml

added commands to enable TLS/SSL v1.2 for any command using invoke-webrequest

* Update T1069.002.yaml

syntax correction

* Update T1134.001.yaml

syntax correction

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-06-16 12:41:04 -06:00
CircleCI Atomic Red Team doc generator e1989f2bec Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-05-18 15:24:18 +00:00
CircleCI Atomic Red Team GUID generator da2dd2b06b Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-05-18 15:24:12 +00:00