Thomas de Brelaz
c0c31e4c0c
* added tests 10-15 to T1547.001.yaml covering various missing keys used for run persistence Committer: Thomas De Brelaz <thockoro@hotmail.com> * fixed name for test 14 Committer: Thomas De Brelaz <thockoro@hotmail.com> * added missing HKLM test for explorer run key Committer: Thomas De Brelaz <thockoro@hotmail.com> * readability improvements * fixed readability issues Committer: Thomas De Brelaz <thockoro@hotmail.com> * small ymal type fix Committer: Thomas De Brelaz <thockoro@hotmail.com> Co-authored-by: Thomas De Brelaz <thomas.de-brelaz@ubisoft.com> Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
Atomic Red Team
Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments.
Get started
You can execute atomic tests directly from the command line, no installation required. See the Getting started page of our wiki.
For a more robust testing experience, consider using an execution framework like Invoke-Atomic.
Learn more
The Atomic Red Team documentation is available as a wiki.
For information about the philosophy and development of Atomic Red Team, visit our website at https://atomicredteam.io.
Contribute to Atomic Red Team
Atomic Red Team is open source and community developed. If you're interested in becoming a contributor, check out these resources:
- Join our Slack workspace and get involved with the community. Don't forget to review the code of conduct before you join.
- Report bugs and request new features by submitting an issue.
- Read our contribution guide for more information about contributing directly to this repository.
- Check the license for information regarding the distribution and modification of Atomic Red Team.