Class tools for overview of MITRE ATT&CK®
This may interupt your class interaction
This file is a full Windows 2k12 image 6.4GB - it has no license. It will shut down after one hour of boot time
https://ceh-v11-20220609.s3.amazonaws.com/ATTACKLAB/ATTACK-LAB-2k12-insecure.ova
* https://github.com/redcanaryco/invoke-atomicredteam/wiki/Installing-Invoke-AtomicRedTeam
* https://mitre-attack.github.io/attack-navigator/
* https://atomicredteam.io/atomics/
* https://github.com/deanbushmiller/ATTACK
- Install Chrome
- Update chrome://net-internals/#hsts add github.com and include subdomains.
- This will permit chrome to access hsts sites
- Install Office 2013 Word & Excel
- Install version 10 of PDF viewer
- https://github.com/MicrosoftDocs/PowerShell-Docs/blob/main/reference/docs-conceptual/windows-powershell/wmf/setup/install-configure.md Powershell install
- https://learn.microsoft.com/en-us/powershell/scripting/windows-powershell/wmf/setup/install-configure?view=powershell-7.3#installing-from-the-command-prompt
- Run as administrator - command prompt ( NOT current powershell window)
- Navigate to Downloads folder
- Win8.1AndW2K12R2-KB3191564-x64.msu /quiet /norestart $. Check your version $PSVersionTable.PSVersion
- You must do a few steps out of order to reduce frustration RUN POWERSHELL AS ADMIN
- [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
- Install InvokeAtomic ( watch the next line wrap)
- IEX (IWR 'https://raw.githubusercontent.com/redcanaryco/invoke-atomicredteam/master/install-atomicredteam.ps1' -UseBasicParsing); Install-AtomicRedTeam -getAtomics
- You must re-set path
- Import-Module "C:\AtomicRedTeam\invoke-atomicredteam\Invoke-AtomicRedTeam.psd1" -Force
1. Read ATTACK- link, Read Atomic link, then execute
2. Getprereqs, Invoke-AtomicTest T####.### -GetPrereqs
3. Close extra command prompt windows