security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e136a49db2497ffdf91fa0d32826dc1816637554
atomic-red-team/atomics/T1134.004
T
History
Michael Haag c8f43265c7 Introducing AtomicTestHarnesses Tests to ART (#1270) 
* Introduce AtomicTestHarness Tests to ART

Adding:
- T1134.004 - Access Token Manipulation: Parent PID Spoofing
- T1218.001 - Signed Binary Proxy Execution: Compiled HTML File
- T1218.005 - Signed Binary Proxy Execution: Mshta

These tests utilize the recently released [AtomicTestHarnesses](https://github.com/redcanaryco/atomictestharnesses) to simulate the base tests from from each ATH Harness. Input arguments may be manipulated as needed to enhance simulation.

* Generate docs from job=validate_atomics_generate_docs branch=atomictestharness-tests

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
2020-10-22 14:34:31 -06:00
..
bin
Convert to Mitre ATT&CK sub-technique schema (#1056)
2020-06-17 12:55:46 -06:00
src
Convert to Mitre ATT&CK sub-technique schema (#1056)
2020-06-17 12:55:46 -06:00
T1134.004.md
Introducing AtomicTestHarnesses Tests to ART (#1270)
2020-10-22 14:34:31 -06:00
T1134.004.yaml
Introducing AtomicTestHarnesses Tests to ART (#1270)
2020-10-22 14:34:31 -06:00