Commit Graph

2061 Commits

Author SHA1 Message Date
CircleCI Atomic Red Team doc generator b0191df2e7 Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 22:46:37 +00:00
Clément Notin 5258767a8e T1197: use different names for local files of different tests (#1050)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-19 16:46:01 -06:00
CircleCI Atomic Red Team doc generator 726677c8a8 Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 22:28:22 +00:00
Clément Notin 60f399cdca T1105: fix bitsadmin local_path (#1051)
Absolute path is required

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-19 16:28:03 -06:00
CircleCI Atomic Red Team doc generator a9581378a7 Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 22:24:37 +00:00
Clément Notin 609035b803 T1551.001: fix wording (#1053)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-19 16:24:11 -06:00
CircleCI Atomic Red Team doc generator 6bb3c3351d Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 22:23:26 +00:00
Clément Notin 0e29cc757c T1569.002-1: add cleanup (#1069)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-19 16:22:52 -06:00
CircleCI Atomic Red Team doc generator ffb170aa83 Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 22:21:43 +00:00
Clément Notin 5a5807aba7 T1053.005: execute remotely the cleanup command, after remote creation of scheduled task (#1070)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-19 16:21:23 -06:00
CircleCI Atomic Red Team doc generator 89f95ec381 Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 22:20:31 +00:00
Hare Sudhan Muthusamy e3dba0cbe2 Pre Req issue fix. (#1072)
* Check Prereqs error fix

* Check Prereqs error fix in T1046.

* Prereq issue fix.

* Attack command issue fix.

* Extra backslash removed
2020-06-19 16:20:06 -06:00
CircleCI Atomic Red Team doc generator c77258e6fb Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 16:30:34 +00:00
JrOrOneEquals1 08a1750179 fix quoting issue (#1071) 2020-06-19 10:30:09 -06:00
CircleCI Atomic Red Team doc generator 103a7caebb Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 01:26:55 +00:00
JrOrOneEquals1 46d03cf5d7 remove unused input arg (#1066) 2020-06-18 19:26:20 -06:00
CircleCI Atomic Red Team doc generator ee9de1db31 Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 01:19:01 +00:00
JrOrOneEquals1 9229441214 executor to bash (#1061)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-18 19:18:39 -06:00
CircleCI Atomic Red Team doc generator 4b9052957c Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 01:17:50 +00:00
JrOrOneEquals1 94f4ef0774 correct input arg name (#1062)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-18 19:17:32 -06:00
CircleCI Atomic Red Team doc generator 85d656775d Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 01:15:35 +00:00
JrOrOneEquals1 9468c7d87d fix input arg name (#1063)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-18 19:15:15 -06:00
CircleCI Atomic Red Team doc generator 8b92674c8b Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 01:13:58 +00:00
JrOrOneEquals1 755e7e3126 remove unused input arg (#1064)
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-18 19:13:32 -06:00
CircleCI Atomic Red Team doc generator 46d8aa755d Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-19 01:12:47 +00:00
JrOrOneEquals1 ea1c4e5e92 correct input arg name (#1065) 2020-06-18 19:12:27 -06:00
CircleCI Atomic Red Team doc generator 67dad9ece3 Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-18 23:52:23 +00:00
JrOrOneEquals1 d8c37b4f4d fix double quotes escaping issue (#1060) 2020-06-18 17:51:36 -06:00
CircleCI Atomic Red Team doc generator 8a82e9b66a Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-18 01:57:35 +00:00
hypnoticpattern 83dce0dcfa Fix macOS tests (#1059)
* Fix macOS tests

* Fix typo in T1574.006

* Replaced zsh with bash, add prereq_command

* Fix test name in T1053.004

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-06-17 19:57:14 -06:00
Carrie Roberts 61fab9a7c6 remove markdown files from gitignore (#1058) 2020-06-17 19:19:57 -06:00
CircleCI Atomic Red Team doc generator 52e0a089ad Generate docs from job=validate_atomics_generate_docs branch=master 2020-06-17 23:24:09 +00:00
Carrie Roberts f8d9b9dee9 spacing change (#1057) 2020-06-17 17:23:34 -06:00
Carrie Roberts 24549e3866 Convert to Mitre ATT&CK sub-technique schema (#1056)
* Initial transfer of atomics to MITRE subtechniques

* Add GUIDs back in, attack_technique to string (#1019)

* technique to string and add guids back in

* technique to string and add guids back in

* technique to string and add guids back in

* technique to string and add guids back in

* Subtechnique transfer T1220-T1546.005 (#1020)

* Create T1222.001.yaml

* Create T1222.002.yaml

* Create T1505.002.yaml

* Update T1543.003.yaml

* Update AtomicService.cs

* Update T1546.005.yaml

* Delete T1222.yaml

* Update T1482.yaml

* Update T1485.yaml

* Update T1220.yaml

* Update T1489.yaml

* Update T1490.yaml

* Update T1496.yaml

* Update T1505.003.yaml

* Update T1505.yaml

* Update T1518.001.yaml

* Update T1518.yaml

* Update T1529.yaml

* Update T1543.004.yaml

* Update T1546.001.yaml

* Update T1546.002.yaml

* Update T1546.002.yaml

* Update T1546.001.yaml

* Update T1543.004.yaml

* Update T1543.002.yaml

* Update T1543.001.yaml

* Update T1518.001.yaml

* Update T1546.004.yaml

* Update T1546.003.yaml

* Update T1531.yaml

* Update T1222.001.yaml

* Update T1222.002.yaml

* Update T1505.002.yaml

* Update T1505.003.yaml

* Update T1518.001.yaml

* Update T1543.001.yaml

* Update T1546.005.yaml

* Update T1546.004.yaml

* Update T1546.003.yaml

* Update T1546.002.yaml

* Update T1546.001.yaml

* Update T1543.004.yaml

* Update T1543.003.yaml

* Update T1543.002.yaml

* added auto_generated_guid 1220

* added T1222.001 auto_generated_guid

* Update T1222.002.yaml

added   auto_generated_guid entries

* Update T1482.yaml

  auto_generated_guid added

* Update T1485.yaml

added   auto_generated_guids

* Update T1489.yaml

added   auto_generated_guids

* Update T1490.yaml

added   auto_generated_guids

* Update T1496.yaml

added   auto_generated_guid

* Update T1505.002.yaml

added   auto_generated_guid from old T1505 same atomic

* Update T1505.003.yaml

added  auto_generated_guid from previous atomic 1100

* Delete T1505.yaml

no longer needed, moved to 1505.002

* Update T1518.yaml

added  auto_generated_guids

* Update T1529.yaml

added   auto_generated_guids

* Update T1531.yaml

added   auto_generated_guids

* Update T1543.001.yaml

added   auto_generated_guid

* Update T1543.002.yaml

added   auto_generated_guid

* Update T1543.004.yaml

added   auto_generated_guid

* Update T1546.001.yaml

added   auto_generated_guid

* Update T1546.002.yaml

added   auto_generated_guid

* Update T1546.003.yaml

* Update T1546.004.yaml

added  auto_generated_guid

* Update T1546.005.yaml

added  auto_generated_guid

* add guids back in

* fix spacing issue

* fix spacing

* fix spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>

* Sub-techniques T1053-T1113 - Updates (#1022)

* Sub-techniques T1053-T1113 - Updates

Updated techniques for sub-techniques.

* minor fixes

format fixing

* Added GUIDs

- Added GUIDs back
- Fixed typo (T1054)
- Fixed attack_technique from an array to a string

* Sub-technique updates T1546.008 through T1574.011 (#1024)

* sub technique updates

* sub technique updates

* sub technique updates

* Carrie updates (#1017)

* updated T1110,12,13

* updated T1114

* updated T1114

* updated T1115

* updated T1119

* updated T1123,24

* updated T1127

* updated T1114

* updated T1127

* updated T1132

* T1134.004

* T1134.004

* updated T1135

* updated T1136

* updated T1137

* updated T1140

* remove depracted T1153

* updated T1176

* updated T1197

* updated T1201

* updated T1202

* updated T1204

* updated T1207

* updated T1216

* updated T1204

* updated T1217

* updated T1218

* updated T1218

* updated T1219

* updated T1218

* attack_technique to string

* Subtechnique transfer (#1025)

* T1003 review

* T1005 manual review changes

* T1027.002 sub-technique review

* T1027.004 sub-technique review

* T1036 sub-technique review

* T1037 sub-technique review

* T1048 sub-technique review

* YAML bugfixes

* Adding auto-generated GUIDs back to tests

* merging with Mike's PR

* Merging with Carrie's PR

* fix spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>

* Subtechnique fix (#1026)

* add atomic_tests: element

* add atomic_tests: element

* more fixes

* more fixes

* more fixes

* sub technique minor fixes 1 (#1027)

* fixes

* fixes

* more fixes

* more fixes

* display name fix (#1028)

* remove some deprecated stuff. reorganize a little (#1031)

* Gendocs fix (#1033)

* gendocs updates for subtechniques

* add folders

* ignore auto generated markdown files

* remove tmp files

* add tmp files

* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer

* navigator layer v3.0

* Generate docs from job=validate_atomics_generate_docs branch=subtechnique_transfer

Co-authored-by: Matt Graeber <60448025+mgraeber-rc@users.noreply.github.com>
Co-authored-by: Tsora-Pop <35981510+Tsora-Pop@users.noreply.github.com>
Co-authored-by: Michael Haag <mike@redcanary.com>
Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-06-17 12:55:46 -06:00
Matt Graeber 14905c7a16 Merge pull request #1032 from redcanaryco/atomicfriday-06052020
Atomic Friday 06052020
2020-06-10 10:19:56 -04:00
Matt Graeber 13a49af96a Merge branch 'master' into atomicfriday-06052020 2020-06-10 08:44:55 -04:00
Matt Graeber 4567926d8a Merge pull request #1038 from briancdonohue/patch-1
"Get Started!" link leads to a 404.
2020-06-10 08:28:32 -04:00
Brian 2852d954a1 "Get Started!" link leads to a 404.
The "Get started!" link at the bottom of the atomicredteam.io page is broken. I suggested updating it so it leads to the testing section of the .io site (https://atomicredteam.io/testing)
2020-06-09 14:42:52 -04:00
Mike Haag 260f6af059 Update Atomic_Friday.md 2020-06-05 12:52:40 -06:00
Mike Haag 495e327ba4 Update Atomic_Friday.md 2020-06-05 10:40:34 -06:00
Mike Haag 130824249d Update Atomic_Friday.md 2020-06-05 09:39:18 -06:00
Mike Haag bfc0d5955f Update Atomic_Friday.md 2020-06-05 07:36:09 -06:00
Mike Haag 56f1e14135 Create Atomic_Friday.md 2020-06-05 07:34:43 -06:00
Omar Santos d8ffdf2ee6 Fixing broken link (#1012)
Fixed the broken link at the bottom of the page " Ready to start testing? [Get started!](https://github.com/redcanaryco/atomic-red-team/blob/master/testing)"
2020-05-28 17:50:04 -06:00
hypnoticpattern 41f553d7ef Python runner checks dependencies and run cleanup (#1011)
Co-authored-by: hypnoticpattern <>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-05-26 12:44:05 -06:00
CircleCI Atomic Red Team doc generator be41a50f01 Generate docs from job=validate_atomics_generate_docs branch=master 2020-05-21 22:27:49 +00:00
Brian Thacker 2cc548c118 Fix typo t1055 t1100 t1010 (#1007)
* Path correction test 4

T1055 test 4 default path of exe_binary did not work on a standard system nor provide the flexibility of an input argument.

* Update T1100.yaml

Added /q (quiet mode) to the cleanup command to prevent command from hanging.

* Update T1010.yaml

Test 1 used a default path with an environment variable naming schema used with powershell not the executor command_prompt.

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-05-21 16:27:29 -06:00
CircleCI Atomic Red Team doc generator 0160032da5 Generate docs from job=validate_atomics_generate_docs branch=master 2020-05-21 22:12:58 +00:00
Andrew Beers ef0e95bf50 T1500 - Dynamic C# Compile (#1008)
* write test

* use input arg in command

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
2020-05-21 16:12:16 -06:00
CircleCI Atomic Red Team doc generator 3c588cc680 Generate docs from job=validate_atomics_generate_docs branch=master 2020-05-21 22:04:59 +00:00