Commit Graph

40 Commits

Author SHA1 Message Date
Atomic Red Team doc generator bba1e1bc75 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-20 02:53:29 +00:00
Hare Sudhan 73f61a7600 FreeBSD cleanup (#2604)
* FreeBSD cleanup

* fix T1059.004.yaml

* fix T1070.003.yaml

* cleanup

* Fix T1078.003

* fix t1078.003

* fix t1078.003

* fix t1078.003
2023-11-19 21:52:36 -05:00
Atomic Red Team doc generator ad2d7c8f13 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-06 22:42:54 +00:00
Hare Sudhan 62a85c12b5 FreeBSD changes (#2585)
* freebsd changes

* renaming freebsd to linux
2023-11-06 17:41:43 -05:00
Atomic Red Team doc generator 4d6c4e8e23 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-02 00:56:51 +00:00
Atomic Red Team GUID generator 16b5287208 Generate GUIDs from job=generate-docs branch=master [skip ci] 2023-11-02 00:56:30 +00:00
Alonso Cárdenas 3b8d0af302 Remove auto_generated_guid lines from new entries
Some other tiny modifications
2023-06-09 09:11:41 -05:00
Alonso Cárdenas 86913f3573 Merge branch 'master' of https://github.com/alonsobsd/atomic-red-team 2023-06-01 22:03:39 -05:00
Atomic Red Team doc generator b1f3c968f2 Generated docs from job=generate-docs branch=master [ci skip] 2023-05-19 17:06:33 +00:00
Alonso Cárdenas f1c5a9be03 Add FreeBSD support 2023-05-08 11:06:08 -05:00
Atomic Red Team doc generator 69ff63cbeb Generated docs from job=generate-docs branch=master [ci skip] 2022-10-28 17:03:36 +00:00
DerKi 0d4be0fcdc Update T1070.003.yaml (#2209)
In this command "Set-PSReadLineOption -HistorySaveStyle SaveIncrementally",The "–" correct is "-"
2022-10-28 12:02:59 -05:00
Atomic Red Team doc generator 09b7ade645 Generated docs from job=generate-docs branch=master [ci skip] 2022-09-29 17:15:18 +00:00
Atomic Red Team GUID generator 5d77f4da7e Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-09-29 17:15:10 +00:00
Carrie Roberts 68633fc0e2 Set Custom AddToHistoryHandler to Avoid History File Logging (#2168)
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
2022-09-29 11:14:32 -06:00
Atomic Red Team doc generator d0dad62dbc Generated docs from job=generate-docs branch=master [ci skip] 2022-09-23 22:57:18 +00:00
Atomic Red Team doc generator 819934cc3f Generated docs from job=generate-docs branch=master [ci skip] 2022-06-16 22:47:00 +00:00
CircleCI Atomic Red Team doc generator 4b1bc4557e Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-19 18:43:15 +00:00
glallen 4a5881e343 Linux prereq updates (#1673)
* T1070.003-9 update (get_)prereq_commmand

- moved system changes to the get_prereq(s)
- ubuntu `passwd` didn't accept `--stdin`
- updated get_prereqs for both ubuntu/centos

* T1016 - update prereq

* T1018 - update prereq

* T1562.001 - update rsyslog prereq

* T1560.001 updates dep check/install, update default likely to exist

switch to /var/log/wtmp and /var/log/btmp vs ${HOME}/*.txt, since those will
always be present

tests for zip in the prereq

adds deb/rpm install for zip

* T1486 - update getprereqs

* T1135 - update prereqs

* T1046 - update prereqs

* T1040 - update prereqs
2021-11-19 11:42:46 -07:00
CircleCI Atomic Red Team doc generator 36d49de4c8 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 17:04:33 +00:00
CircleCI Atomic Red Team doc generator 575b36a8e6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 15:16:54 +00:00
CircleCI Atomic Red Team doc generator 8035973916 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 14:18:48 +00:00
CircleCI Atomic Red Team GUID generator afb9b9cc33 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 14:18:43 +00:00
tlor89 0c9a8d403e Merge branch 'master' into T1070.003_Update 2021-04-02 09:12:26 -05:00
tlor89 a2395663c0 Update for Disable Bash History Logging with SSH -T Atomic
Made the following changes for -T for the command and resolved supported platform to linux
2021-04-02 09:07:57 -05:00
tlor89 08b98f2556 Update T1070.003.yaml 2021-04-02 09:03:48 -05:00
CircleCI Atomic Red Team doc generator 582d2e97f8 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2020-12-28 22:45:56 +00:00
Brian Thacker d9dcbd3dec T1070.003 test7 cleanup (#1345)
* Update T1070.003.yaml

Added cleanup command to test "Clear and Disable Bash History Logging"

* Update T1070.003.yaml

corrected spacing

* Update T1070.003.yaml

changed echo set -o to a sed replace command
2020-12-28 15:45:17 -07:00
Keith McCammon 28086402e2 Maintainers updates (#1328)
* Update maintainers.md

Remove reference to announcements channel, which has been created.

* Generate docs from job=validate_atomics_generate_docs branch=maintainers-updates

* Update maintainers.md

Updates to maintainers meeting purpose, scope, and agendas.

* Generate docs from job=validate_atomics_generate_docs branch=maintainers-updates

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-12-15 14:18:41 -07:00
crothe 9c7a3b0889 Update gems to remove kramdown vulnerability (#1287)
* Update gems to remove kramdown vulnerability

* Generate docs from job=validate_atomics_generate_docs branch=fix_kramdown_vuln

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-11-12 13:40:23 -07:00
Rodney de05b1a73d Update T1070.003.yaml (#1283)
* Update T1070.003.yaml

* Update T1078.001.yaml

* Update T1113.yaml

Remove error from screen when cleaning up for T1113-5

* Update T1197.yaml

Remove error when cleaning up for T1197-4

* Update T1562.001.yaml

Remove error from cleanup of T1562.001-23

* Update T1562.004.yaml

Remove error shown for cleanup of T15262.004-5 and T15262.004-6

* Update T1574.009.yaml

Remove error from cleanup of T1574.009-1

* Update T1553.004.yaml

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-11-12 11:29:08 -07:00
CircleCI Atomic Red Team doc generator 4e4f8a2775 Generate docs from job=validate_atomics_generate_docs branch=master 2020-10-08 02:37:06 +00:00
tuckner b206a0d7cd Add tests for T1070.003 Clear Command History (#1237)
* feat: add t1070.003 powershell history clear commands

* feat: include preventing powershell logging

* feat: add cleanup command

* consolidate tests, fix typo

Removed the two duplicated atomics that were using aliases for Remove-Item

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-10-07 20:36:04 -06:00
Toua Lor 14b746b73e T1070.003_SSH-T 2020-09-30 14:53:20 -05:00
Toua Lor e497f0bce5 T1070.003_SSH-T 2020-09-30 14:46:21 -05:00
Toua Lor 2839942c1f SSH -T 2020-09-30 14:28:41 -05:00
CircleCI Atomic Red Team doc generator 910a2a764a Generate docs from job=validate_atomics_generate_docs branch=master 2020-09-29 13:53:28 +00:00
CircleCI Atomic Red Team doc generator d8dd757a24 Generate docs from job=validate_atomics_generate_docs branch=master 2020-08-01 22:54:55 +00:00
tlor89 34953ac95f T1070.003-Update (#1164)
* T1070.003-Update

* wording update

Co-authored-by: Toua Lor <tlor@nti.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-08-01 16:54:39 -06:00
Michael Haag 2cc5348312 Fix T1551 to T1070 (#1161)
* Fix T1551 to T1070

Found that we had T1070 labeled incorrectly as T1551. MITRE pushed a fix for this per https://attack.mitre.org/resources/updates/updates-july-2020/

```
Indicator Removal on Host Was incorrectly re-IDd to T1551, restored to T1070 and its sub-techniques were changed to T1070.001, T1070.002, T1070.003, T1070.004, T1070.005, and T1070.006
```

* Generate MD fix

Attempting to get the MD to generate

* Update enterprise-attack.json

* Generate docs from job=validate_atomics_generate_docs branch=T1070-indicator-removal-fix

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-08-01 09:46:06 -06:00