Atomic Red Team doc generator
bba1e1bc75
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-20 02:53:29 +00:00
Hare Sudhan
73f61a7600
FreeBSD cleanup ( #2604 )
...
* FreeBSD cleanup
* fix T1059.004.yaml
* fix T1070.003.yaml
* cleanup
* Fix T1078.003
* fix t1078.003
* fix t1078.003
* fix t1078.003
2023-11-19 21:52:36 -05:00
Atomic Red Team doc generator
ca9a658d79
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-19 19:23:53 +00:00
Atomic Red Team GUID generator
55cbd79603
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-19 19:23:38 +00:00
AmyHeat
5641019462
Added test for T1070.006 - Timestomp for date modified using SetFile on MacOS ( #2608 )
...
* T1070.006 Timestomp for date modified using SetFile on MacOS
* cleanup
* cleanup
---------
Co-authored-by: amyheat <amyheat@rule10.net >
2023-11-19 14:23:04 -05:00
Atomic Red Team doc generator
30aa7cfb02
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-17 17:49:45 +00:00
Steven Dick
12e54c4d08
Nterl0k T1134.001-3 Nsussudio ( #2606 )
...
* Update T1134.001.md
* Update T1134.001.yaml
* Update T1134.001.yaml
* Update T1134.001.md
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-11-17 09:48:52 -08:00
Atomic Red Team doc generator
04a5812d41
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-17 17:46:05 +00:00
Atomic Red Team GUID generator
5a9d3290f2
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-17 17:45:50 +00:00
0xv1n
2990b979ba
New LocalAdmin Persistence Technique ( #2602 )
...
* New LocalAdmin Persistence Technique
* use github permanent link
* remove guid
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-11-17 09:45:16 -08:00
Atomic Red Team doc generator
4ef1397635
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-17 17:35:58 +00:00
Atomic Red Team GUID generator
13252e354f
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-17 17:35:43 +00:00
Thomas Meng
14b35456cf
Add T1055.015 listPlanting test ( #2601 )
...
* Add T1055.015 listPlanting test
* Update T1055.015.yaml
Typo
* Update listPlanting.c
Correct typo
* Update T1055.015.yaml
Delete the auto_generated_guid value
* Update T1055.015.yaml
Remove auto_generate_guid
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-11-17 09:35:08 -08:00
Atomic Red Team doc generator
5aec883ca4
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-17 17:32:58 +00:00
Atomic Red Team GUID generator
ead225c103
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-17 17:32:43 +00:00
Swachchhanda Shrawan Poudel
2e802c737d
Added new test that tampers with windows defender registry ( #2599 )
...
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-11-17 09:32:08 -08:00
Atomic Red Team doc generator
cfb9321b8d
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-17 17:29:19 +00:00
Atomic Red Team GUID generator
e76abe6a90
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-17 17:28:59 +00:00
Hare Sudhan
2f26d9917a
Duplicate guid fix ( #2609 )
...
* duplicate guid fix
* duplicate guid fix
2023-11-17 09:28:12 -08:00
Atomic Red Team doc generator
c3dc8abb84
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-13 21:46:56 +00:00
Hare Sudhan
7dfdc97d79
FreeBSD Cleanup ( #2603 )
...
* FreeBSD Cleanup
* cleanup
* fix t1016
* reducing multiline if else to single line
* fix t1037.003
* ignore T1003.007
* fix t1003.007
* more fixes
2023-11-13 16:45:43 -05:00
Atomic Red Team doc generator
8961c1692c
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-09 04:06:12 +00:00
Atomic Red Team GUID generator
bd938f584f
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-09 04:05:54 +00:00
Biological Robot
07225ec592
T1005 Find and dump sqlite databases (Linux) ( #2402 )
2023-11-08 23:05:07 -05:00
Atomic Red Team doc generator
0287e7561a
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-09 04:03:31 +00:00
Carrie Roberts
ab79beb982
ignore certificate ( #2595 )
2023-11-08 23:02:43 -05:00
Atomic Red Team doc generator
2a6bbc2a2b
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-09 04:00:38 +00:00
Carrie Roberts
8fa4b4cbeb
revert changes kernel info ( #2598 )
2023-11-08 22:59:50 -05:00
Atomic Red Team doc generator
08a8183910
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-08 15:29:28 +00:00
Panos Moullotos
2b365242a1
Update T1218.yaml ( #2597 )
...
Dependency Executor Needs to be explicitly defined
2023-11-08 07:28:25 -08:00
Atomic Red Team doc generator
b31fc6e66a
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-08 14:20:11 +00:00
Panos Moullotos
f9f938d5f8
Update T1218.yaml ( #2596 )
...
Added prereqs to T1218#12 so it can be executed remotely with invoke-atomictest
2023-11-08 06:19:21 -08:00
Atomic Red Team doc generator
b01f3864d2
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-08 01:59:27 +00:00
Atomic Red Team GUID generator
0a1c27c01b
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-08 01:59:13 +00:00
Jose Enrique Hernandez
bf2251b4ab
Merge pull request #2582 from tsale/master
...
New Atomic - Excel Application Object for LM
2023-11-07 20:58:38 -05:00
Jose Enrique Hernandez
154f17daff
Merge branch 'master' into master
2023-11-07 20:56:50 -05:00
Atomic Red Team doc generator
da6a0516db
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-08 00:29:16 +00:00
Atomic Red Team GUID generator
717f5941fd
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-08 00:28:55 +00:00
Micah Babinski
dfb25a02e3
Add Test for Registry-Only "Ghost Tasks" Procedure within T1053.005 ( #2588 )
...
* Added ghost task test
* Minor improvements to documentation and test design.
---------
Co-authored-by: Hare Sudhan <code@0x6c.dev >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-11-07 19:28:14 -05:00
Atomic Red Team doc generator
323c12d348
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-07 22:02:39 +00:00
Thomas Meng
d133634d49
Process injection RWX injection / Mockingjay local injection ( #2587 )
...
* This should be a short message describing what changed.
* The new process injection technique: RWX injection AKA Mockingjay under T1055
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-11-07 14:01:21 -08:00
Atomic Red Team doc generator
11e3355467
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-07 00:34:32 +00:00
art-labs
18955ff270
fix link ( #2593 )
2023-11-06 19:33:38 -05:00
Atomic Red Team doc generator
157de65031
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-07 00:28:51 +00:00
Atomic Red Team GUID generator
d7ba80b533
Generate GUIDs from job=generate-docs branch=master [skip ci]
2023-11-07 00:28:24 +00:00
0-etep
02b6a5a050
New Atomic - T1654 Log Enumeration ( #2584 )
...
* Create T1654.yml
* Rename T1654.yml to T1654.yaml
* add link to dfir report
* Update T1654.yaml
---------
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-11-06 19:27:32 -05:00
Carrie Roberts
1c965f637d
latest mitre attack info ( #2592 )
...
* updating atomics count in README.md [ci skip]
* updating atomics count in README.md [ci skip]
* latest enterprise attack data
---------
Co-authored-by: publish bot <opensource@redcanary.com >
2023-11-06 19:25:22 -05:00
Hare Sudhan
8baabb4d9b
Merge branch 'master' into master
2023-11-06 17:43:37 -05:00
Atomic Red Team doc generator
ad2d7c8f13
Generated docs from job=generate-docs branch=master [ci skip]
2023-11-06 22:42:54 +00:00
Hare Sudhan
62a85c12b5
FreeBSD changes ( #2585 )
...
* freebsd changes
* renaming freebsd to linux
2023-11-06 17:41:43 -05:00