redcanaryco/atomic-red-team

Issues

• Problem: The specific attack for a particular command line is not shown, how to find the corresponding attack on the server side when viewing logs?

  #3000 opened a month ago by subvert0r
  1

• Problem: T1486 Atomic Test #10 - Akira Ransomware drop Files with .akira Extension and Ransomnote --> Script issue

  #2967 opened 3 months ago by SirStephanikus
  2

• Problem: T1176 Broken uBlock URL

  #2998 opened 2 months ago by ajkingio
  0

• Problem: T1562.001 Atomic Test #12 - Uninstall Sysmon --> Failed

  #2952 opened 3 months ago by SirStephanikus
  4

• Problem: T1562.001 Atomic Test #11 - Unload Sysmon Filter Driver --> Prereq test failed

  #2951 opened 3 months ago by SirStephanikus
  2

• Problem: Missing Invoke-AtomicRedTeam Module Files

  #2947 opened 2 months ago by kylaleppanen
  3

• T1566.001: RDP Phishing via Outlook Temporary Folders

  #2975 opened 2 months ago by onuratali
  1

• Problem: T1555 - Dump credentials from Windows Credential Manager With PowerShell [windows Credentials] -> 404 not found

  #2977 opened 2 months ago by RomuDeuxfois
  0

• Problem: T1078.004 Atomic Test #2 - Valid Accounts: Cloud Accounts (Azure) --> GetPrereqs failed

  #2971 opened 2 months ago by kienmarkdo
  1

• Attack-Navigator-Layers for Windows not complete

  #2942 opened 2 months ago by SirStephanikus
  1

• Problem: T1574.006 /etc/ld.so.preload not deleted and sudo messed up

  #2944 opened 2 months ago by iosonogio
  2

• Problem: AtomicRed doesn't download externaltools

  #2917 opened 3 months ago by WrongProvider
  2

• Problem: A mistake in cleanup_command of T1547.005

  #2914 opened 3 months ago by Sunr1seSun
  2

• Read team idea

  #2929 opened 4 months ago by hunterspeciallist
  0

• Problem: T1202.yaml - no 'dependency_executor_name' parameter

  #2848 opened 4 months ago by ilya-shmel
  5

• Problem: Remote GetPreq Command Failure

  #2879 opened 4 months ago by jj-cmyk
  5

• Idea: T1574.14 Easy Peasy Test - Someone Should Build it. Not it.

  #2864 opened 5 months ago by secdev02
  1

• Problem: Missing .md and auto_generated_guid in T1016.001.yaml

  #2907 opened 5 months ago by marcopedrinazzi
  0

• Problem: When invoking all tests, on tactic T1529 windows shuts down, other tests are not executed because of that

  #2816 opened 5 months ago by ghost6-2
  2

• T1055.015-1 does not download the Prereq

  #2866 opened 5 months ago by robertstrom
  0

• Problem: Auto Generated GUID collision in index.yaml

  #2845 opened 6 months ago by thebleucheese
  2

• Problem: error downloading the project zip

  #2805 opened 6 months ago by NChilds86
  2

• Request: Adding predefined tags

  #2749 opened 6 months ago by dsolstad
  4

• Bug: T1204.002 #2 OSTap Payload Download

  #2778 opened 7 months ago by dsolstad
  0

• Problem: Case T1547.001 missing dll

  #2751 opened 7 months ago by dsolstad
  2

• Problem: 404 for https://raw.githubusercontent.com/S3cur3Th1sSh1t

  #2771 opened 7 months ago by chandangupta1997
  1

• Variable inconsistencies

  #2750 opened 8 months ago by dsolstad
  2

• Idea: Update all techniques by mitre/cti repository automatically

  #2610 opened a year ago by socketz
  4

• Problem: missing `auto_generated_guid`

  #2753 opened 9 months ago by yoyocircle
  1

• Problem: Indexes/Indexes-CSV/windows-index.csv does not have T1547.015 entry

  #2712 opened 9 months ago by kchoudhury-scwx
  4

• Idea: Add/modify atomic tests/template for a better way to identify not linux only tests

  #2671 opened 9 months ago by alonsobsd
  4

• Broken link in T1040

  #2720 opened 10 months ago by chandangupta1997
  1

• Idea:

  #2691 opened 10 months ago by markjpT
  0

• Atomic T1550.002 Mimikatz Pass the Hash looping

  #2651 opened a year ago by PinhaFrita
  2

• T1112 TestNumber 42

  #2640 opened a year ago by mansour898989
  2

• Problem: T1555.003-16 BrowserCollector.exe doesn't work on Chrome < 80

  #2639 opened a year ago by ajkingio
  2

• Problem: Mismatch between available Atomic Tests for Linux and MITRE ATT&CK Layer

  #2623 opened a year ago by djelito-ps
  9

• Problem: Yaml validator allowed duplicate keys

  #2615 opened a year ago by clr2of8
  0

• Problem: Duplicate key in T1505.005.yaml

  #2614 opened a year ago by Rudy-RENOUX
  2

• Problem: Duplicated `auto_generated_guid`

  #2607 opened a year ago by yoyocircle
  4

• Problem: T1048.002-1

  #2594 opened a year ago by Rudy-RENOUX
  0

• Problem: technique T1018 is throwing errors after the last update on the main branch

  #2583 opened a year ago by Vjeroen
  3

• Problem: technique T1485 is throwing errors

  #2586 opened a year ago by C0SB
  0

• Problem: test GUIDS being auto-generated and replacing previously generated GUIDS

  #2579 opened a year ago by hunty-dumpy
  3

• Problem: T1048.002-1

  #2577 opened a year ago by Rudy-RENOUX
  1

• Idea: new process injection technique

  #2518 opened a year ago by thomasxm
  1

• Problem: Test GUID not generated after PR merged

  #2496 opened a year ago by hunty-dumpy
  3

• Problem: T1572-4 - run ngrok: non-default PowerShell module used

  #2487 opened a year ago by zaicurity
  1

• Problem: T1098 exception

  #2433 opened 2 years ago by sailor-go
  1

• Idea: New tests need to added to END of yaml

  #2416 opened 2 years ago by amalone-scwx
  1