Small and highly portable detection tests based on MITRE's ATT&CK.
Role in this project:
Security Engineer Contributions:25 commits, 34 PRs, 13 comments in 11 months
Contributions summary:Laken primarily contributed to enhancing the platform's cross-platform capabilities, particularly focusing on MacOS and Linux environments. Their work included adding platform-specific checks to the execution framework and installation scripts, enabling the execution of Atomic Red Team tests on non-Windows operating systems. They also modified the execution logic to incorporate the 'sh' and 'bash' executors, introduced logging improvements for execution details like hostname and username, and fixed issues with the execution log's test name field.
mitremitre-attackportable
Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.
Role in this project:
Security Engineer Contributions:5 commits, 3 PRs, 3 comments in 4 months
Contributions summary:Laken contributed significantly to improving the multi-platform support and functionality of the Invoke-AtomicRedTeam PowerShell module. Their work included adding OS identification, implementing different executors (sh, bash), and adapting installation scripts. They also addressed bugs in the execution logs and enhanced the module's ability to identify and report on elevated privileges, crucial for penetration testing and red team activities. Further contributions included adding hostname and username to execution logs.
atomicspowershell-module