Commit Graph

37 Commits

Author SHA1 Message Date
Michael Haag 7bc7660f4f Discovery.bat Update (#397)
* Discovery and Cleanup

* Generate docs from job=validate_atomics_generate_docs branch=Discovery

* mv discovery.bat

* Fixed Discovery.bat URLs

Updated Techniques with new location of discovery.bat

* Generate docs from job=validate_atomics_generate_docs branch=Discovery
2018-11-02 13:17:39 -07:00
Lee Holmes 9ddffd1b17 Adding starter implementation of Atomic Red Team Automation Framework, as well as Atomic Red Team testing framework 2018-04-15 17:54:49 -07:00
atmathis 5e494127ac Add Ranged Chain Reaction (Mac/Linux)
Adding POSIX Chain Reaction that is platform aware and runs different
checks for each platform. Simulates Discovery, Collection, and
Exfiltration phases.
2018-02-15 17:53:13 -05:00
Michael Haag 60f7be8223 Removing Detections
Removing detections until further notice
2018-02-13 09:57:20 -06:00
Michael Haag 901d2275c4 ARTifacts - Detections
Adding a few detections for some Chain Reactions.
2018-02-01 15:46:25 -06:00
Michael Haag dc0e511d12 Reactor - Detection - Collection
Added Collection
2018-01-31 09:29:11 -06:00
Michael Haag d943fa1315 Reactor - Detection
Detection for Reactor Chain Reaction
2018-01-31 09:17:08 -06:00
Michael Haag 0588f4f38a Quick Fix 2018-01-29 13:09:50 -06:00
Michael Haag a091f57f94 Final Reactor
Completion of the Reactor Chain Reaction
2018-01-18 13:40:31 -07:00
Michael Haag 9a5128a7da Mac Matrix Update
Updated Mac Matrix and technique names
2018-01-16 11:00:21 -07:00
Michael Haag 1cf1cdd279 Reactor Chain Reaction
Chain Reaction - Reactor
2018-01-16 08:59:22 -07:00
Michael Haag 533e27193f Update chain_reaction_Fission.bat 2018-01-09 10:52:57 -07:00
caseysmithrc 4326601868 Merge pull request #41 from redcanaryco/Argonaut
Argonaut Chain Reaction + Updates to windows.md
2017-12-06 15:27:35 -07:00
Michael Haag 5449cc27f0 Argonaut
Argonaut was built with the idea of assisting organizations with identifying the use of Invoke-WebRequest aliases - Wget and Curl. Within your detection tools, how does it look? Do you have detection for Wget and curl on Windows?
2017-12-06 14:22:21 -08:00
caseysmithrc 8cba9e39ec Update DragonsTail.vba 2017-12-06 14:01:43 -07:00
caseysmithrc 1804b97780 Updated All the Things 2017-11-30 08:54:10 -07:00
Michael Haag b54dad8890 Merge pull request #33 from redcanaryco/Protoss-Dev
Fix Dragon's Tail References
2017-11-29 11:38:17 -07:00
caseysmithrc b4deda9aae Fix Dragon's Tali References 2017-11-29 11:36:40 -07:00
Michael Haag 0685e5ab8c Merge pull request #32 from redcanaryco/Protoss-Dev
Fix Dragon's Tail .bat
2017-11-29 11:23:17 -07:00
caseysmithrc 2da4ce1e9b Fix Dragon's Tail .bat 2017-11-29 11:21:48 -07:00
Michael Haag ebedfe3192 Merge pull request #31 from redcanaryco/Protoss-Dev
Update Dragon's Tail
2017-11-29 10:23:54 -07:00
caseysmithrc ab69bd75a6 Update Draon's Tail 2017-11-29 10:11:47 -07:00
Michael Haag 8f42ea3fc4 Account Manipulation + Chain Reactions Names
Changed CR names
+ Fixed .md for Account manipulation
2017-11-20 11:34:34 -08:00
Michael Haag dae8dcabe5 Dragon's Tail - Publication
- Removed APT32 name scheme
+ Refactored with ART Naming Scheme
2017-11-17 14:45:22 -08:00
Michael Haag 29698b6131 Updated Formatting
Updated formatting.
2017-11-15 10:28:08 -08:00
caseysmithrc 4d7aeb8286 remove mht 2017-11-15 08:24:18 -07:00
caseysmithrc 4da267b9d8 vba commit 2017-11-14 10:25:37 -07:00
caseysmithrc 83d3c9d7c1 fix 2017-11-14 10:17:04 -07:00
caseysmithrc 3425e8d0ff update 2017-11-14 10:11:09 -07:00
caseysmithrc 4054c123c7 update 2017-11-14 10:08:30 -07:00
caseysmithrc 1134ecaa6a updated 2017-11-14 10:06:41 -07:00
Michael Haag 61d4797e64 Chain Reaction
+ New chain reaction
2017-11-13 11:01:57 -07:00
Michael Haag 2e4ff79e66 Chain reaction
Basic Chain reaction
2017-11-07 15:49:28 -08:00
caseysmithrc aaa7105a42 Merge pull request #17 from redcanaryco/dev-mh
Chain Reactions
2017-11-06 15:22:55 -07:00
Michael Haag 98f6d339e6 Chain Reactions 2017-11-06 14:21:36 -08:00
caseysmithrc 479a11fa09 fix discovery cmd 2017-11-06 15:11:30 -07:00
caseysmithrc dcf67629de webinar script
Update
2017-11-06 15:07:57 -07:00