Go runner for atomic red team test cases

Build

git clone https://github.com/ejohn/go-atomic.git
cd go-atomic
go build github.com/ejohn/go-atomic/cmd/go-atomic

Usage guide

Usage of go-atomic:
  -arg value
    	pass argument to test [ex foo=bar], set multiple times for different arguments
  -cleanup
    	run only cleanup
  -debug
    	show debug logs
  -dependency
    	check prerequisites and get them if needed
  -dry-run
    	build test and display what will be executed when the test is run
  -guid string
    	test case guids separated by comma
  -name string
    	name of the test to run
  -num string
    	test case number [1-N]
  -path string
    	path to atomics folder
  -prereq
    	check if prerequisites for test are met
  -run
    	run dependencies, test commands and cleanup for all tests selected
  -tech string
    	list of technique id's [ex T1002,T1003]
  -test
    	run only the test, disables dependencies and cleanup
  -timeout string
    	timeout for commands [ex 1s, 2m]

Example usage

List all tests

go-atomic -path atomic-red-team/atomics/ | jq .Name

Filter tests with technique id and name

go-atomic -path atomic-red-team/atomics/ -tech T1082 -name "Hostname Discovery"

Run test

go-atomic -path atomic-red-team/atomics/ -tech T1082 -name "Hostname Discovery" -run

Pass arguments

go-atomic -path atomic-red-team/atomics/ -guid f8aab3dd-5990-4bf8-b8ab-2226c951696f -arg path=/tmp/loot.txt

Dry run to see what will get executed

go-atomic -path atomic-red-team/atomics/ -tech T1087 -num 1 --dry-run

Run a test with timeout

go-atomic -path atomic-red-team/atomics/ -tech T1082 -num 2 -run -timeout 1m

Check if prerequisites are satisfied for a test

go-atomic -path atomic-red-team/atomics/ -tech T1009 -num 1 -arg "file_to_pad=/bin/ls" -prereq