91c7add074
add recurse/force flags to cleanup command
2022-06-20 16:03:58 -06:00
42c5a0bab6
Merge pull request #2005 from redcanaryco/clr2of8-patch-18
2022-06-16 19:00:35 -04:00
3d7ae73566
typo fix
2022-06-16 16:53:22 -06:00
819934cc3f
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-16 22:47:00 +00:00
eb6a77b699
Merge pull request #2003 from clr2of8/mitreApr2022
2022-06-16 18:46:29 -04:00
4828b1d327
Merge branch 'master' into mitreApr2022
2022-06-16 16:38:42 -06:00
15270384cd
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-16 21:44:10 +00:00
49b1dec3c6
attempt to stop service first, in case its already running ( #2001 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-06-16 15:43:38 -06:00
17c9a64fee
recovered sct file from github history ( #2000 )
...
* Create T1218.003.sct
* Update T1218.003.inf
2022-06-16 14:41:09 -06:00
add51411df
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-16 19:24:52 +00:00
174e18402f
Update T1218.007.yaml ( #1999 )
2022-06-16 13:24:18 -06:00
165c26be6a
updates based mitre v11
2022-06-15 17:25:38 -06:00
5a14d96c37
Generated docs from job=generate-docs branch=master [ci skip]
2022-06-15 21:35:21 +00:00
0d09ff0234
Merge pull request #1998 from clr2of8/no02
...
moving atomics to correct T#
2022-06-15 17:34:47 -04:00
03e37456cd
moving atomics to correct T#
2022-06-15 15:30:42 -06:00
1d1ae02aa3
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-15 17:24:10 +00:00
d0a80fb9b4
adding t1547.003 ( #1996 )
...
* adding t1547.003
* fixing cleanup commands
2022-06-15 11:23:41 -06:00
9c3785a4ca
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-13 21:04:24 +00:00
148a5a235d
Adding T1546.015 Test 3 - COM Hijacking with RunDLL32 (Local Server Switch) ( #1992 )
...
* Update T1546.015.yaml
* Add files via upload
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-06-13 15:03:51 -06:00
25299b1e40
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-08 22:51:10 +00:00
84232bc50c
Merge pull request #1989 from RoundBunny/master
...
Added T1574.006 MacOS Dylib Injection
2022-06-08 18:50:39 -04:00
40917c1a65
Moved c script
2022-06-07 10:36:26 -05:00
89c697c951
Merge branch 'master' into master
2022-06-04 23:05:22 -04:00
d8f1820ef6
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-04 00:04:19 +00:00
a768529778
Creates Schedule task with hidden attribute settings ( #1986 )
...
* Update T1112.yaml
* Update T1112.yaml
* typos
* Update T1087.002.yaml
* Update T1087.002.yaml
* Update T1087.002.yaml
* Add files via upload
* Update T1053_05_SCTASK_HIDDEN_ATTRIB.xml
* Update T1053.005.yaml
* Update T1053.005.yaml
* Update T1087.002.yaml
* Update T1087.002.yaml
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-06-03 18:03:49 -06:00
3d378b3924
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-03 22:48:12 +00:00
3ccb32ec78
WMI Persistence using ActiveScriptEventConsumer ( #1987 )
2022-06-03 16:47:47 -06:00
df67a8aa4d
Fixed not compiling
2022-06-03 10:23:25 -05:00
3e36aa671f
MacOS Dylib injection for T1574.006
...
reference: https://cedowens.medium.com/taking-esf-for-a-nother-spin-6e1e6acd1b74
2022-06-02 14:57:35 -05:00
7748526bd4
C file for opening calc
2022-06-02 14:56:00 -05:00
5b1111f223
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-06-01 20:32:51 +00:00
a42be924d6
Merge pull request #1983 from javery-sysdig/patch-2
...
Create T1611.002.yaml "Escape to Host"
2022-06-01 13:32:12 -07:00
fa3a182989
Merge branch 'master' into patch-2
2022-06-01 13:30:54 -07:00
3b83031d25
Generated docs from job=generate-docs branch=master [ci skip]
2022-05-31 17:14:18 +00:00
cc5498aee5
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-05-31 17:14:13 +00:00
5c7c272b82
Merge pull request #1981 from Leomon5/patch-14
...
Adding T1110.003 Test 7 - Password Spray with MSOLSpray
2022-05-31 10:13:40 -07:00
0d57af5887
Merge branch 'master' into patch-14
2022-05-31 10:12:43 -07:00
a111959d19
Generated docs from job=generate-docs branch=master [ci skip]
2022-05-25 04:21:58 +00:00
d9b7195f86
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-05-25 04:21:53 +00:00
c02ec5c36e
Changes file extension of Test 1195 so that the file is detected and … ( #1982 )
...
* Changes file extension of Test 1195 so that the file is detected and there is no error anymore
* Update T1195.yaml
Co-authored-by: Georg Schlagholz <georg.schlagholz@it-native.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2022-05-24 22:21:26 -06:00
a888e0e7c9
Generated docs from job=generate-docs branch=master [ci skip]
2022-05-25 04:12:17 +00:00
a8f00eb241
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-05-25 04:12:12 +00:00
af529da1e5
Add lolbin ( #1979 )
2022-05-24 22:11:43 -06:00
be60206066
Create T1611.002.yaml "Escape to Host"
...
Fairly straight forward way to escape a privileged docker container and compromise the host once getting root on the container.
2022-05-24 11:16:30 -05:00
322f6843fa
Adding T1110.003 Test 7 - Password Spray with MSOLSpray
2022-05-23 23:44:09 -05:00
9e8bb918d5
Generated docs from job=generate-docs branch=master [ci skip]
2022-05-19 23:05:53 +00:00
7846e9770a
Generate GUIDs from job=generate-docs branch=master [skip ci]
2022-05-19 23:05:48 +00:00
908924d51f
add a lightweight password spray test ( #1978 )
2022-05-19 17:05:21 -06:00
ebfc28708d
Generated docs from job=generate-docs branch=master [ci skip]
2022-05-17 22:48:32 +00:00
c171910f63
typo fix ( #1973 )
2022-05-17 16:48:04 -06:00
Carrie Roberts