infosecn1nja
/
red-team-scripts
mirror of https://github.com/infosecn1nja/red-team-scripts.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update Lockbit_Ransomware_Atomic_Simulation.ps1

main
Rahmat Nurfauzi 2023-05-16 11:50:17 +07:00 committed by GitHub
parent 482523c337
commit df491580c0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Lockbit_Ransomware_Atomic_Simulation.ps1
View File

@ -1,4 +1,4 @@
# Lockbit Atomic Simulation # Lockbit Ransomware Atomic Simulation
# Author : Rahmat Nurfauzi (@infosecn1nja) # Author : Rahmat Nurfauzi (@infosecn1nja)
# Date : 16/05/2023 # Date : 16/05/2023
# Simulate Lockbit Ransomware tactics, techniques, and procedures (TTP) with atomic red team to validate security controls # Simulate Lockbit Ransomware tactics, techniques, and procedures (TTP) with atomic red team to validate security controls
@ -54,7 +54,7 @@ Invoke-AtomicTest T1003.005
# Atomic Test #5 - Create shortcut to cmd in startup folders # Atomic Test #5 - Create shortcut to cmd in startup folders
Invoke-AtomicTest T1547.009 -TestNumbers 2 Invoke-AtomicTest T1547.009 -TestNumbers 2
# Atomic Test #6 - Create shortcut to cmd in startup folders # Atomic Test #6 - Scheduled Task Startup Script
Invoke-AtomicTest T1053.005 -TestNumbers 1 Invoke-AtomicTest T1053.005 -TestNumbers 1
# Atomic Test #7 - WinPwn - UAC Bypass ccmstp technique # Atomic Test #7 - WinPwn - UAC Bypass ccmstp technique