Skip to content

Instantly share code, notes, and snippets.

@sasqwatch
Created May 3, 2019 18:25
Show Gist options
  • Save sasqwatch/5761973f73f9e2db2194b54345fe023e to your computer and use it in GitHub Desktop.
Save sasqwatch/5761973f73f9e2db2194b54345fe023e to your computer and use it in GitHub Desktop.
MITRE ATT&CK Group 0007
Import-Module .\execution-frameworks\Invoke-AtomicRedTeam\Invoke-AtomicRedTeam\Invoke-AtomicRedTeam.psm1
$G0007 = @("T1002","T1003","T1005","T1014","T1027","T1037","T1040","T1056","T1057","T1059","T1064","T1070","T1071","T1074","T1075","T1083","T1085","T1086","T1090"
,"T1099","T1105","T1107","T1113","T1114","T1119","T1122","T1134","T1137","T1140","T1158","T1173" )
foreach ($technique in $G0007)
{
try
{
New-Variable -Name "$technique" -Value (Get-AtomicTechnique ".\atomics\$technique\$technique.yaml")
}
catch {}
}
Get-Variable | Where {$_.Name -like "T????"} | %{ Invoke-AtomicTest $_.Value }
# Source https://attack.mitre.org/groups/G0007/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment