abb837bcfe
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-28 23:08:09 +00:00
647c26323f
Create T1652 folder and yaml file ( #2808 )
...
* Create T1652
Adding a new folder so that I can add a YAML file for a new test.
* Delete atomics/T1652
Restarting
* Create T1652.yaml
Created a folder and new a new YAML file.
* Update T1652.yaml
Added more verbosity and details to t1652.
* Update T1082.yaml
Atomic Test #28 - Driver Enumeration using DriverQuery
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-06-28 18:06:32 -05:00
05d3123aa5
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-18 18:41:54 +00:00
b84afa7c76
Update T1112.yaml ( #2809 )
...
Added new Atomic "Flush ShimCache"
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-06-18 13:40:42 -05:00
f8df955af0
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-18 18:10:56 +00:00
f205476bf7
Update T1046.yaml ( #2802 )
...
added new test
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-06-18 13:09:50 -05:00
0658d14d1d
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-13 22:08:58 +00:00
1cb761c5a0
Modified the Prereq_command of Test Unload Sysmon Filter Driver ( #2807 )
...
* Modified the Prereq_command of Test Unload Sysmon Filter Driver
* modified typo on the description
---------
Co-authored-by: alphonsa-01 <NA>
2024-06-13 17:07:09 -05:00
1e3b63fbaf
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-04 14:50:36 +00:00
30b73d06bf
Update to T1105 with New Atomic Test ( #2792 )
...
* Adding a sample zip file to help with atomic test
* Update T1105.yaml
* Update T1105.yaml
---------
Co-authored-by: Hare Sudhan <code@0x6c.dev >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-06-04 09:49:22 -05:00
430b2ac270
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-04 14:41:09 +00:00
c2bcb1c2a6
Update T1057.yaml ( #2791 )
...
New Process discovery atomic using PC hunter
Co-authored-by: Hare Sudhan <code@0x6c.dev >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-06-04 09:39:56 -05:00
4b63cc604e
Change ISO8859-1 to UTF-8 on included MD file ( #2798 )
...
* fix jinja2 syntax
* fix LinkById syntax
* further syntax correction for LinkById instances
* change encoding to UTF-8 to satisfy subsequent build processes
2024-06-03 17:38:44 -04:00
16ed461ee4
Fix LinkById syntax ( #2794 )
...
* fix jinja2 syntax
* fix LinkById syntax
* further syntax correction for LinkById instances
2024-06-03 12:46:19 -04:00
65ef96a69d
Generated docs from job=generate-docs branch=master [ci skip]
2024-06-03 11:09:33 +00:00
8537ebde3c
fix undefined filename ( #2790 )
...
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2024-06-03 07:08:11 -04:00
fa4273ccd9
Generated docs from job=generate-docs branch=master [ci skip]
2024-05-31 14:19:47 +00:00
f4382cf14c
fix jinja2 syntax ( #2793 )
2024-05-31 10:18:39 -04:00
c816622770
Generated docs from job=generate-docs branch=master [ci skip]
2024-05-29 23:42:13 +00:00
fbe8663f49
Update T1562.001.yaml ( #2788 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-29 18:40:55 -05:00
5175bbc392
Update T1112.yaml ( #2785 )
...
* Update T1112.yaml
Adding a new atomic test for registry modification for shadow key in terminal services
* Update T1112.yaml
Make reference a link, remove empty guid
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-29 18:39:11 -05:00
25fdb321ee
Generated docs from job=generate-docs branch=master [ci skip]
2024-05-16 01:42:23 +00:00
c26905e768
Added Splashstop streamer to T1219 ( #2781 )
...
* Added Splashstop streamer to T1219
* Fix YAML indent
---------
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2024-05-15 20:41:05 -05:00
e855218dba
Generated docs from job=generate-docs branch=master [ci skip]
2024-05-15 00:55:00 +00:00
efa3370b62
Update T1569.002.yaml ( #2776 )
...
* Update T1569.002.yaml
Added new test Modifying ACL of Service Control Manager via SDET
* correction
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2024-05-14 20:53:45 -04:00
7bf6eaa80d
Generated docs from job=generate-docs branch=master [ci skip]
2024-05-15 00:52:20 +00:00
5d816a1ddb
remove empty cleanup and add an auto_generated_guid ( #2779 )
...
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2024-05-14 20:51:06 -04:00
9c842daeb3
Generated docs from job=generate-docs branch=master [ci skip]
2024-05-15 00:48:54 +00:00
5f71a665e2
Fix T1219 test ( #2780 )
2024-05-14 19:41:14 -05:00
5f866ca451
Update T1112.yaml ( #2774 )
...
* Update T1112.yaml
Add new test Disable Windows Prefetch Through Registry
* fix spacing
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-10 13:36:54 -05:00
56b0e29923
New - T1553.006 ( #2775 )
...
* Create T1553.006.md
* Create T1553.006.yaml
* Update T1553.006.yaml
* Update T1553.006.md
* Update T1553.006.md
* Update T1553.006.md
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-10 13:34:29 -05:00
1c452cbafb
Adding Netscan test to T1018 ( #2767 )
...
* Adding Netscan test to T1018
* Fixing typo in Netscan test description
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-10 13:00:34 -05:00
b2658be590
Update T1219.yaml ( #2763 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-10 12:54:10 -05:00
0cea1e6309
Created T1016.002 atomic ( #2762 )
...
* Create T1016.002.yaml
* Update T1016.002.yaml
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-10 12:50:13 -05:00
1b8b66b6fe
Generated docs from job=generate-docs branch=master [ci skip]
2024-05-10 14:47:37 +00:00
b4c30600a8
Update T1135.yaml ( #2761 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-09 11:44:13 -05:00
67bfc95355
New Atomic test- Process Hacker -Update T1057.yaml ( #2754 )
...
* New Atomic test- Process Hacker -Update T1057.yaml
* Update T1057.yaml
Removed the cleanup command and input arguments for the uninstallation package
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-05-09 11:39:54 -05:00
9af1dd8675
Adding codebox so '\' characters shows up well in Markdown ( #2766 )
...
Co-authored-by: Nico <nmontesino@incide.es >
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2024-05-08 23:41:25 -04:00
4c6639f4ff
Generated docs from job=generate-docs branch=master [ci skip]
2024-04-27 18:09:22 +00:00
e2428a7b12
Added new a new atomic test in T1003 and T1187 ( #2758 )
...
* Update T1003.yaml
Added a new atomic test (number 7) - Send NTLM Hash with RPC Test Connection
* Update T1187.yaml
Added new atomic test under T1187 (Test no 3) - "Trigger an authenticated RPC call to a target server with no Sign flag set"
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-04-27 13:08:12 -05:00
f64434da24
Generated docs from job=generate-docs branch=master [ci skip]
2024-04-27 17:50:49 +00:00
5c50c4409d
Adding T1112 Test 69 ( #2748 )
...
* Update T1112.yaml
* Update T1112.yaml
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-04-27 12:44:00 -05:00
58496ee330
updating atomics count and guids [ci skip]
2024-04-26 18:39:07 +00:00
6450adfb3b
Update T1048.002.yaml ( #2741 )
...
Added two tests for wget linux
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2024-04-26 14:35:50 -04:00
ef6b9e2fd3
updating atomics count and guids [ci skip]
2024-04-26 18:10:13 +00:00
85660f12bf
Added tests for T1562.012 ( #2743 )
...
* Added tests for T1562.012
* Update T1562.012.yaml
* Update T1562.012.yaml - Added cleanup commands
---------
Co-authored-by: Hare Sudhan <code@0x6c.dev >
2024-04-26 13:53:35 -04:00
e7e1e8acff
Fix auto_generated_guids file ( #2757 )
...
* Update guid.py
* Update used_guids.txt
2024-04-25 11:29:51 -06:00
dd4372d5cd
updating atomics count and guids [ci skip]
2024-04-25 17:07:26 +00:00
18388cd63d
Create T1622.yaml ( #2752 )
...
Created a new folder T1622 and an yaml file for new atomic test
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-04-23 19:44:00 -05:00
a7a16b3471
Update T1135.yaml ( #2745 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2024-04-23 19:36:34 -05:00
Atomic Red Team doc generator