Skip to content

Instantly share code, notes, and snippets.

Import-Module "/Users/buff/AtomicRedTeam/invoke-atomicredteam/Invoke-AtomicRedTeam.psd1" -Force
$PSDefaultParameterValues = @{"Invoke-AtomicTest:PathToAtomicsFolder"="/Users/buff/AtomicRedTeam/atomics"}
$PathToAtomicsFolder="/Users/buff/AtomicRedTeam/atomics"
$techniques = gci $path -Recurse -Include T*.yaml | Get-AtomicTechnique
foreach ($technique in $techniques) {
foreach ($atomic in $technique.atomic_tests) {
if ($atomic.supported_platforms.contains("macos")) {
echo $technique.attack_technique

Keybase proof

I hereby claim:

  • I am cyberbuff on github.
  • I am cyberbuff (https://keybase.io/cyberbuff) on keybase.
  • I have a public key ASCRhoF_FA9d-QRFiFgywsqJhh13EQOZQmNIJs7E_VACBwo

To claim this, I am signing this object: