Commit Graph

  • 760b7ad679
    Merge pull request #75 from danbourke/mac-persistence-emond Michael Haag 2018-02-13 09:35:27 -0600
  • 71789328c1
    Merge pull request #76 from danbourke/72 Michael Haag 2018-02-13 09:33:57 -0600
  • d1eaf4454d resolves #72 Dan Bourke 2018-02-13 14:46:47 +1100
  • b73f61c5dc minor consistency edit Dan Bourke 2018-02-13 14:39:08 +1100
  • 99db88ff0d add emond persistence mechanism Dan Bourke 2018-02-13 14:36:59 +1100
  • 6db90fe788
    Merge pull request #74 from redcanaryco/atomic-dev-cs Michael Haag 2018-02-12 08:48:34 -0600
  • af7be36230 Update Payload caseysmithrc 2018-02-11 21:19:46 -0700
  • 80bdcf5f10 Work in progress Linux discovery payload Tony M Lambert 2018-02-08 17:31:39 -0600
  • e12345ed46
    Merge pull request #73 from danbourke/mac-exfil caseysmithrc 2018-02-08 06:09:21 -0700
  • 5930ef5161
    Update Exfiltration_Over_Alternative_Protocol.md Michael Haag 2018-02-08 06:53:06 -0600
  • 7dbbb68677
    Update Exfiltration_Over_Alternative_Protocol.md Michael Haag 2018-02-08 06:52:43 -0600
  • b047c5575f update readme, update linux example path Dan Bourke 2018-02-08 17:05:23 +1100
  • 809b85b2a2 add first pass at SSH exfiltration Dan Bourke 2018-02-08 17:01:34 +1100
  • d01d1f149f
    Merge pull request #70 from mgreen27/patch-1 Michael Haag 2018-02-06 08:18:32 -0700
  • ece7cf1537
    Add_remote_task Matthew Green 2018-02-06 16:05:23 +1100
  • 901d2275c4 ARTifacts - Detections Michael Haag 2018-02-01 15:46:25 -0600
  • eb56e8216f
    Merge pull request #69 from redcanaryco/Haag Michael Haag 2018-01-31 09:29:58 -0600
  • dc0e511d12 Reactor - Detection - Collection Michael Haag 2018-01-31 09:29:11 -0600
  • b010fc6205
    Merge pull request #68 from redcanaryco/Haag caseysmithrc 2018-01-31 08:23:32 -0700
  • d943fa1315 Reactor - Detection Michael Haag 2018-01-31 09:17:08 -0600
  • f4a0a8af83 Merge remote-tracking branch 'redcanaryco/master' atmathis 2018-01-30 14:26:56 -0500
  • 0588f4f38a Quick Fix Michael Haag 2018-01-29 13:09:50 -0600
  • b5c4d940ef
    Merge pull request #67 from redcanaryco/Haag caseysmithrc 2018-01-29 10:19:11 -0500
  • 814a210ec3
    Create SID_History_Injection.md patch-4 rahmatnurfauzi 2018-01-26 07:25:32 +0700
  • a091f57f94 Final Reactor Michael Haag 2018-01-18 13:40:31 -0700
  • 3e7dda54bd
    Merge pull request #65 from redcanaryco/Haag caseysmithrc 2018-01-17 09:17:22 -0700
  • 5e9b720ecf Windows Matrix Michael Haag 2018-01-16 11:51:16 -0700
  • 58c0b63bc6 Updated Linux Matrix Michael Haag 2018-01-16 11:47:24 -0700
  • 9a5128a7da Mac Matrix Update Michael Haag 2018-01-16 11:00:21 -0700
  • d36664c5c7
    Merge pull request #64 from redcanaryco/Haag caseysmithrc 2018-01-16 10:24:47 -0700
  • a5d7e40120 Mshta Add Michael Haag 2018-01-16 10:22:36 -0700
  • 94f729c684 Merge branch 'master' into Haag Michael Haag 2018-01-16 10:22:25 -0700
  • d01ed9c636
    Merge pull request #63 from redcanaryco/atomic-dev-cs Michael Haag 2018-01-16 10:21:19 -0700
  • 4c01f9eca6 mshta T1170 caseysmithrc 2018-01-16 10:19:15 -0700
  • 382d6313a3 Windows Matrix Update Michael Haag 2018-01-16 10:10:52 -0700
  • 1cf1cdd279 Reactor Chain Reaction Michael Haag 2018-01-16 08:59:22 -0700
  • 3ac9834f38 mshta caseysmithrc 2018-01-16 08:56:26 -0700
  • 1b087c7e2a
    Update Program.cs caseysmithrc 2018-01-13 12:28:33 -0700
  • 66c8240afa
    Merge pull request #61 from atmathis/master Michael Haag 2018-01-11 15:25:54 -0700
  • 89513673d7 Linux Discovery atmathis 2018-01-11 16:56:58 -0500
  • d0cf8c4542 Update Process Discovery atmathis 2018-01-11 16:09:12 -0500
  • 0e877849ef Fixing .bash_profile atmathis 2018-01-11 15:54:20 -0500
  • 4cd236a438 Adding tree command to File and Directory Discovery atmathis 2018-01-11 15:33:27 -0500
  • be3a018733 Merge remote-tracking branch 'redcanaryco/master' atmathis 2018-01-11 15:32:32 -0500
  • 776fc6b954
    Merge pull request #60 from redcanaryco/Haag caseysmithrc 2018-01-11 11:15:57 -0700
  • 1499c4be3f Fixes Michael Haag 2018-01-11 11:00:46 -0700
  • 9c9c27ddd1 Merge remote-tracking branch 'redcanaryco/master' atmathis 2018-01-11 09:58:01 -0500
  • 5b4a8b9c0b
    Merge pull request #59 from infosecn1nja/patch-3 Michael Haag 2018-01-11 07:24:31 -0700
  • 9c8137a56a
    Update File_and_Directory_Discovery.md patch-3 rahmatnurfauzi 2018-01-11 17:12:09 +0700
  • a85093767d
    Update File_and_Directory_Discovery.md master rahmatnurfauzi 2018-01-11 17:09:24 +0700
  • e1824a8756
    Update File_and_Directory_Discovery.md patch-2 rahmatnurfauzi 2018-01-11 17:04:47 +0700
  • dcccde9adc
    Merge pull request #57 from redcanaryco/Haag caseysmithrc 2018-01-09 15:11:42 -0700
  • 29cf36761a Mac Discovery Michael Haag 2018-01-09 14:53:47 -0700
  • 533e27193f
    Update chain_reaction_Fission.bat Michael Haag 2018-01-09 10:52:57 -0700
  • 72a010b9b1
    Merge pull request #56 from redcanaryco/Haag caseysmithrc 2018-01-09 10:07:55 -0700
  • c4bbef438a Mac Credential Access Michael Haag 2018-01-09 10:01:11 -0700
  • f4fe0d67d6
    Merge pull request #53 from infosecn1nja/patch-1 caseysmithrc 2018-01-09 09:26:41 -0700
  • ee4d1f9e22
    Merge pull request #54 from redcanaryco/Haag caseysmithrc 2018-01-09 09:26:15 -0700
  • 3c84c659f5 Mac Persistence Michael Haag 2018-01-09 09:07:41 -0700
  • 4480d4d11d Cron Job name fix Michael Haag 2018-01-09 07:08:46 -0700
  • 8f10054683 Update Mac ReadMe Michael Haag 2018-01-09 07:03:47 -0700
  • a54ad3e2a8
    Merge pull request #51 from redcanaryco/Haag caseysmithrc 2018-01-08 14:58:21 -0700
  • c9d674bf80
    Merge pull request #49 from JimmyAstle/Discover/Files_folders_Linux Michael Haag 2018-01-08 14:55:40 -0700
  • b56282c007
    Merge pull request #52 from JimmyAstle/Discovery/System_Information_Discovery Michael Haag 2018-01-08 14:54:39 -0700
  • 4842ffb05d
    Persistence .bashrc / .bash_profile patch-1 Rahmat Nurfauzi 2018-01-07 05:55:19 +0700
  • 42d3c51ed9 Fix Mac Grid atmathis 2018-01-03 23:11:30 -0500
  • 0df10d39cb Merge remote-tracking branch 'redcanaryco/master' atmathis 2018-01-03 23:07:54 -0500
  • f5c1d7af56 Adding in some Linux System OS discovery one liners Jimmy Astle 2018-01-03 17:34:12 -0500
  • 6160fd756e Readme Michael Haag 2018-01-03 09:07:53 -0700
  • 0b6275cf50 Mac Additions Michael Haag 2018-01-03 09:05:14 -0700
  • d0d71177e1
    Merge branch 'master' into Discover/Files_folders_Linux JimmyAstle 2018-01-03 10:34:10 -0500
  • 9a4b06e89d
    Merge pull request #50 from JimmyAstle/Defense_Evasion/Clear_history Michael Haag 2018-01-03 07:30:49 -0700
  • a8ae18ca0b
    Merge pull request #48 from JimmyAstle/Discovery/Account_Linux Michael Haag 2018-01-03 07:30:10 -0700
  • e36a8e3377 Removing the groups command as that should live in a seperate spot Jimmy Astle 2018-01-02 17:20:28 -0500
  • 7f78ad5ace Adding in missing table link for Account Discovery Jimmy Astle 2018-01-02 17:16:27 -0500
  • 976b27a683 Merge branch 'master' into Haag Michael Haag 2018-01-02 14:54:44 -0700
  • 6dea66bdec Defense Evastion Michael Haag 2018-01-02 14:54:21 -0700
  • 219534d464 Updating Table to link to file and folder discovery Jimmy Astle 2018-01-02 16:11:04 -0500
  • 919993d886 Couple of fun searching techniques Jimmy Astle 2018-01-02 16:07:07 -0500
  • e7d731615e Adding in a few more account discovery techniques Jimmy Astle 2018-01-02 16:03:14 -0500
  • 22d7cdcec8 Echo white space into bach history Jimmy Astle 2018-01-02 15:45:53 -0500
  • 7dd644c77b Adding in dev/null bash history symlink Jimmy Astle 2018-01-02 15:36:15 -0500
  • 68e5c6c5ab
    Merge pull request #47 from atmathis Michael Haag 2018-01-02 07:55:00 -0700
  • 1cb5f30dc0
    Update Input_Prompt.md Michael Haag 2018-01-02 07:52:43 -0700
  • 3ef9e7a62c Mac Defense Evasion/Launchctl atmathis 2018-01-01 17:18:54 -0500
  • 5802bb2df8 Mac Indicator Removal on Host atmathis 2018-01-01 17:07:42 -0500
  • a9b36650cd Mac Hidden Users atmathis 2018-01-01 16:38:43 -0500
  • 9b9bd358ed Update HISTCONTROL atmathis 2018-01-01 16:17:10 -0500
  • 0ddc31b336 Mac/Linux HISTCONTROL atmathis 2018-01-01 16:02:52 -0500
  • 232d5eea29 Add Mac Defense Evasion/Disabling Security Tools atmathis 2018-01-01 15:10:44 -0500
  • cac4566d2c Revert "Revert "Linux/Mac Command Clear"" atmathis 2018-01-01 14:30:45 -0500
  • 6439416b26 Revert "Linux/Mac Command Clear" atmathis 2018-01-01 14:29:48 -0500
  • a0c6b2953c Linux/Mac Command Clear atmathis 2018-01-01 14:27:09 -0500
  • dce29fd24d Add/Change Mac and All the Things cleanup atmathis 2017-12-29 12:12:54 -0500
  • 568edb7654
    Merge pull request #46 from redcanaryco/Protoss-Dev caseysmithrc 2017-12-20 15:39:52 -0700
  • d266915612 Update All The Things caseysmithrc 2017-12-20 15:39:07 -0700
  • 54181ad230
    Merge pull request #45 from redcanaryco/persistence caseysmithrc 2017-12-13 15:20:34 -0700
  • 33d6b91220 Windows ReadMe Michael Haag 2017-12-13 10:26:48 -0800
  • aee2840fd5 New Persistence Michael Haag 2017-12-12 15:35:09 -0800
  • a53d8d91cd
    Merge pull request #44 from redcanaryco/Protoss-Dev Michael Haag 2017-12-07 08:24:18 -0800