Atomic Red Team doc generator
1.9 KiB
1.9 KiB
| 1 | Tactic | Technique # | Technique Name | Test # | Test Name | Test GUID | Executor Name |
|---|---|---|---|---|---|---|---|
| 2 | discovery | T1613 | Container and Resource Discovery | 1 | Container and ResourceDiscovery | 8a895923-f99f-4668-acf2-6cc59a44f05e | sh |
| 3 | discovery | T1046 | Network Service Discovery | 9 | Network Service Discovery for Containers | 06eaafdb-8982-426e-8a31-d572da633caa | sh |
| 4 | credential-access | T1552.007 | Kubernetes List Secrets | 1 | List All Secrets | 31e794c4-48fd-4a76-aca4-6587c155bc11 | bash |
| 5 | credential-access | T1552.007 | Kubernetes List Secrets | 2 | ListSecrets | 43c3a49d-d15c-45e6-b303-f6e177e44a9a | bash |
| 6 | persistence | T1053.007 | Kubernetes Cronjob | 1 | ListCronjobs | ddfb0bc1-3c3f-47e9-a298-550ecfefacbd | bash |
| 7 | persistence | T1053.007 | Kubernetes Cronjob | 2 | CreateCronjob | f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3 | bash |
| 8 | execution | T1053.007 | Kubernetes Cronjob | 1 | ListCronjobs | ddfb0bc1-3c3f-47e9-a298-550ecfefacbd | bash |
| 9 | execution | T1053.007 | Kubernetes Cronjob | 2 | CreateCronjob | f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3 | bash |
| 10 | execution | T1610 | Deploy a container | 1 | Deploy Docker container | 59aa6f26-7620-417e-9318-589e0fb7a372 | bash |
| 11 | execution | T1609 | Kubernetes Exec Into Container | 1 | ExecIntoContainer | d03bfcd3-ed87-49c8-8880-44bb772dea4b | bash |
| 12 | execution | T1609 | Kubernetes Exec Into Container | 2 | Docker Exec Into Container | 900e2c49-221b-42ec-ae3c-4717e41e6219 | bash |
| 13 | privilege-escalation | T1053.007 | Kubernetes Cronjob | 1 | ListCronjobs | ddfb0bc1-3c3f-47e9-a298-550ecfefacbd | bash |
| 14 | privilege-escalation | T1053.007 | Kubernetes Cronjob | 2 | CreateCronjob | f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3 | bash |
| 15 | privilege-escalation | T1611 | Escape to Host | 1 | Deploy container using nsenter container escape | 0b2f9520-a17a-4671-9dba-3bd034099fff | sh |
| 16 | privilege-escalation | T1611 | Escape to Host | 2 | Mount host filesystem to escape privileged Docker container | 6c499943-b098-4bc6-8d38-0956fc182984 | sh |
| 17 | defense-evasion | T1610 | Deploy a container | 1 | Deploy Docker container | 59aa6f26-7620-417e-9318-589e0fb7a372 | bash |
| 18 | defense-evasion | T1612 | Build Image on Host | 1 | Build Image On Host | 2db30061-589d-409b-b125-7b473944f9b3 | sh |