secureworks / atomic-harness Goto Github PK
View Code? Open in Web Editor NEWA tool to run and validate telemetry for Atomic Red Team tests
License: MIT License
A tool to run and validate telemetry for Atomic Red Team tests
License: MIT License
If we have a web app that has access to the criteria CSV files and atomic YAML files (perhaps in a docker container), we can provide a method to select a test and view the criteria. We can edit the criteria in a text box, and the web-app can save to the CSV file.
Make it easy to click Next
and go through many similar tests to add/edit criteria.
We need tool(s) to help quickly generate expected telemetry criteria from the atomic test scripts.
YAML
filesinput_arguments
in the matching.file_name
or file_path
we can determine if there is a file modification event as wellcurl
or wget
or rsync
or ssh
or scp
, we can probably determine the netflow host and portWe followed Invoke-Atomic
's lead when referencing atomic tests using their index in the YAML file. However, recent commits have inserted new tests inside the files, changing the indices. Thus we need to switch to reference by partial SHA (8 chars?), with a fallback to index.
redcanaryco/atomic-red-team#2416
Currently the atomic-validation-criteria
for MacOS and Windows is close to nothing. We need a way to show coverage percentage of the number of atomic tests that have criteria.
platform N/M test criteria coverage
.A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.