Skip to content

Commit

Permalink
Generate docs from job=validate_atomics_generate_docs branch=master
Browse files Browse the repository at this point in the history
  • Loading branch information
CircleCI Atomic Red Team doc generator committed Sep 3, 2019
1 parent 0859cb9 commit 6e0c26b
Show file tree
Hide file tree
Showing 9 changed files with 22 additions and 44 deletions.
2 changes: 1 addition & 1 deletion atomics/T1087/T1087.md
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ cat /etc/passwd > #{output_file}
<br/>

## Atomic Test #2 - View sudoers access
xxx (requires root)
(requires root)

**Supported Platforms:** Linux, macOS

Expand Down
12 changes: 4 additions & 8 deletions atomics/T1113/T1113.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,8 +32,7 @@ Use screencapture command to collect a full desktop screenshot
#### Inputs
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| output_file | xxx
| Path | desktop.png|
| output_file | Output file path | Path | desktop.png|

#### Run it with `bash`!
```
Expand All @@ -54,8 +53,7 @@ Use screencapture command to collect a full desktop screenshot
#### Inputs
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| output_file | xxx
| Path | desktop.png|
| output_file | Output file path | Path | desktop.png|

#### Run it with `bash`!
```
Expand All @@ -76,8 +74,7 @@ Use xwd command to collect a full desktop screenshot and review file with xwud
#### Inputs
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| output_file | xxx
| Path | desktop.xwd|
| output_file | Output file path | Path | desktop.xwd|

#### Run it with `bash`!
```
Expand All @@ -99,8 +96,7 @@ Use import command to collect a full desktop screenshot
#### Inputs
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| output_file | xxx
| Path | desktop.png|
| output_file | Output file path | Path | desktop.png|

#### Run it with `bash`!
```
Expand Down
6 changes: 3 additions & 3 deletions atomics/T1139/T1139.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,13 +4,13 @@

## Atomic Tests

- [Atomic Test #1 - xxxx](#atomic-test-1---xxxx)
- [Atomic Test #1 - Search Through Bash History](#atomic-test-1---search-through-bash-history)


<br/>

## Atomic Test #1 - xxxx
xxxx
## Atomic Test #1 - Search Through Bash History
Search through bash history for specifice commands we want to capture

**Supported Platforms:** Linux, macOS

Expand Down
1 change: 0 additions & 1 deletion atomics/T1148/T1148.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,6 @@ ls #{evil_command}
<br/>

## Atomic Test #2 - Mac HISTCONTROL
xxx

**Supported Platforms:** macOS, Linux

Expand Down
2 changes: 0 additions & 2 deletions atomics/T1176/T1176.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,6 @@ Malicious extensions can be installed into a browser through malicious app store
<br/>

## Atomic Test #1 - Chrome (Developer Mode)
xxx

**Supported Platforms:** Linux, Windows, macOS

Expand All @@ -38,7 +37,6 @@ tick 'Developer Mode'.
<br/>

## Atomic Test #2 - Chrome (Chrome Web Store)
xxx

**Supported Platforms:** Linux, Windows, macOS

Expand Down
2 changes: 1 addition & 1 deletion atomics/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -504,7 +504,7 @@
- [T1098 Account Manipulation](./T1098/T1098.md)
- Atomic Test #1: Admin Account Manipulate [windows]
- [T1139 Bash History](./T1139/T1139.md)
- Atomic Test #1: xxxx [linux, macos]
- Atomic Test #1: Search Through Bash History [linux, macos]
- [T1110 Brute Force](./T1110/T1110.md)
- Atomic Test #1: Brute Force Credentials [windows]
- [T1003 Credential Dumping](./T1003/T1003.md)
Expand Down
37 changes: 11 additions & 26 deletions atomics/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -909,9 +909,7 @@ persistence:
identifier: T1176
atomic_tests:
- name: Chrome (Developer Mode)
description: 'xxx

'
description: ''
supported_platforms:
- linux
- windows
Expand All @@ -927,9 +925,7 @@ persistence:

3. Click 'Select'
- name: Chrome (Chrome Web Store)
description: 'xxx

'
description: ''
supported_platforms:
- linux
- windows
Expand Down Expand Up @@ -6583,9 +6579,7 @@ defense-evasion:
export HISTCONTROL=ignoreboth
ls #{evil_command}
- name: Mac HISTCONTROL
description: 'xxx

'
description: ''
supported_platforms:
- macos
- linux
Expand Down Expand Up @@ -12217,9 +12211,7 @@ discovery:

'
- name: View sudoers access
description: 'xxx (requires root)

'
description: "(requires root)\n"
supported_platforms:
- linux
- macos
Expand Down Expand Up @@ -14403,8 +14395,9 @@ credential-access:
- User
identifier: T1139
atomic_tests:
- name: xxxx
description: 'xxxx
- name: Search Through Bash History
description: 'Search through bash history for specifice commands we want to
capture

'
supported_platforms:
Expand Down Expand Up @@ -20467,9 +20460,7 @@ collection:
- macos
input_arguments:
output_file:
description: 'xxx

'
description: Output file path
type: Path
default: desktop.png
executor:
Expand All @@ -20484,9 +20475,7 @@ collection:
- macos
input_arguments:
output_file:
description: 'xxx

'
description: Output file path
type: Path
default: desktop.png
executor:
Expand All @@ -20502,9 +20491,7 @@ collection:
- linux
input_arguments:
output_file:
description: 'xxx

'
description: Output file path
type: Path
default: desktop.xwd
executor:
Expand All @@ -20520,9 +20507,7 @@ collection:
- linux
input_arguments:
output_file:
description: 'xxx

'
description: Output file path
type: Path
default: desktop.png
executor:
Expand Down
2 changes: 1 addition & 1 deletion atomics/linux-index.md
Original file line number Diff line number Diff line change
Expand Up @@ -126,7 +126,7 @@

# credential-access
- [T1139 Bash History](./T1139/T1139.md)
- Atomic Test #1: xxxx [linux, macos]
- Atomic Test #1: Search Through Bash History [linux, macos]
- [T1110 Brute Force](./T1110/T1110.md)
- [T1003 Credential Dumping](./T1003/T1003.md)
- [T1081 Credentials in Files](./T1081/T1081.md)
Expand Down
2 changes: 1 addition & 1 deletion atomics/macos-index.md
Original file line number Diff line number Diff line change
Expand Up @@ -180,7 +180,7 @@

# credential-access
- [T1139 Bash History](./T1139/T1139.md)
- Atomic Test #1: xxxx [linux, macos]
- Atomic Test #1: Search Through Bash History [linux, macos]
- [T1110 Brute Force](./T1110/T1110.md)
- [T1003 Credential Dumping](./T1003/T1003.md)
- [T1081 Credentials in Files](./T1081/T1081.md)
Expand Down

0 comments on commit 6e0c26b

Please sign in to comment.