atomic-red-team

Files

T

Michael Haag c8f43265c7 Introducing AtomicTestHarnesses Tests to ART (#1270 )

* Introduce AtomicTestHarness Tests to ART

Adding:
- T1134.004 - Access Token Manipulation: Parent PID Spoofing
- T1218.001 - Signed Binary Proxy Execution: Compiled HTML File
- T1218.005 - Signed Binary Proxy Execution: Mshta

These tests utilize the recently released [AtomicTestHarnesses](https://github.com/redcanaryco/atomictestharnesses) to simulate the base tests from from each ATH Harness. Input arguments may be manipulated as needed to enhance simulation.

* Generate docs from job=validate_atomics_generate_docs branch=atomictestharness-tests

Co-authored-by: CircleCI Atomic Red Team doc generator <email>

2020-10-22 14:34:31 -06:00

src

Convert to Mitre ATT&CK sub-technique schema (#1056 )

2020-06-17 12:55:46 -06:00

T1218.005.md

Introducing AtomicTestHarnesses Tests to ART (#1270 )

2020-10-22 14:34:31 -06:00

T1218.005.yaml

Introducing AtomicTestHarnesses Tests to ART (#1270 )

2020-10-22 14:34:31 -06:00