Carrie Roberts
511bb87af2
* first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * first draft at dependencies * lowercase url
36 lines
1.3 KiB
YAML
36 lines
1.3 KiB
YAML
---
|
|
attack_technique: TODO
|
|
display_name: TODO
|
|
|
|
atomic_tests:
|
|
- name: TODO
|
|
description: |
|
|
TODO
|
|
|
|
supported_platforms:
|
|
- windows
|
|
- macos
|
|
- linux
|
|
|
|
input_arguments:
|
|
output_file:
|
|
description: TODO
|
|
type: todo
|
|
default: TODO
|
|
|
|
dependency_executor_name: powershell # (optional) The executor for the prereq commands, defaults to the same executor used by the attack commands
|
|
dependencies: # (optional)
|
|
- description: |
|
|
TODO
|
|
prereq_command: | # commands to check if prerequisites for running this test are met. For the "command_prompt" executor, if any command returns a non-zero exit code, the pre-requisites are not met. For the "powershell" executor, all commands are run as a script block and the script block must return 0 for success.
|
|
TODO
|
|
get_prereq_command: | # commands to meet this prerequisite or a message describing how to meet this prereq
|
|
TODO
|
|
|
|
executor:
|
|
name: command_prompt
|
|
elevation_required: true # indicates whether command must be run with admin privileges. If the elevation_required attribute is not defined, the value is assumed to be false
|
|
command: | # these are the actaul attack commands, at least one command must be provided
|
|
TODO
|
|
cleanup_command: | # you can remove the cleanup_command section if there are no cleanup commands
|
|
TODO |