Skip to content

Commit 56fd4b8

Browse files
mgraeber-rcmgraeber-rc
authored
Module directory refactor (#11)
1 parent bb21fb3 commit 56fd4b8

36 files changed

+26
-22
lines changed

‎AtomicTestHarnesses.psd1

+9-5
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
@{
22

33
# Script module or binary module file associated with this manifest.
4-
RootModule = 'AtomicTestHarnesses.psm1'
4+
RootModule = 'Windows\AtomicTestHarnesses.psm1'
55

66
# Version number of this module.
7-
ModuleVersion = '1.10.0.0'
7+
ModuleVersion = '1.10.1.0'
88

99
# ID used to uniquely identify this module
1010
GUID = '195a1637-d4a4-4cb3-8d80-5b5d4e3e930a'
@@ -25,7 +25,7 @@ Description = 'A module to facilitate the testing of attack techniques and their
2525
PowerShellVersion = '5.0'
2626

2727
# Assemblies that must be loaded prior to importing this module
28-
RequiredAssemblies = @('TestHarnesses\T1218.007_Msiexec\Dependencies\Microsoft.Deployment.WindowsInstaller.dll')
28+
RequiredAssemblies = @('Windows\TestHarnesses\T1218.007_Msiexec\Dependencies\Microsoft.Deployment.WindowsInstaller.dll')
2929

3030
# Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.
3131
FunctionsToExport = 'Get-ATHDriverService',
@@ -65,9 +65,13 @@ PrivateData = @{
6565

6666
# ReleaseNotes of this module
6767
ReleaseNotes = @'
68+
1.10.1
69+
------
70+
Improvements:
71+
* Directory refactoring
6872
69-
1.10.0
70-
-----
73+
1.10.0
74+
------
7175
Added:
7276
* Invoke-ATHDumpLSASS
7377
* Invoke-ATHLogonUser

‎LICENSE

100644100755
+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
BSD 3-Clause License
22

3-
Copyright (c) 2020, Red Canary
3+
Copyright (c) 2022, Red Canary
44
All rights reserved.
55

66
Redistribution and use in source and binary forms, with or without

‎AtomicTestHarnesses.psm1 ‎Windows/AtomicTestHarnesses.psm1

File renamed without changes.

‎TestHarnesses/T1003.001_DumpLSASS/DumpLSASS.Tests.ps1 ‎Windows/TestHarnesses/T1003.001_DumpLSASS/DumpLSASS.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1003.001_DumpLSASS/DumpLSASS.ps1 ‎Windows/TestHarnesses/T1003.001_DumpLSASS/DumpLSASS.ps1

File renamed without changes.

‎TestHarnesses/T1055.002_PortableExecutableInjection/InvokeThread.Tests.ps1 ‎Windows/TestHarnesses/T1055.002_PortableExecutableInjection/InvokeThread.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1055.002_PortableExecutableInjection/InvokeThread.ps1 ‎Windows/TestHarnesses/T1055.002_PortableExecutableInjection/InvokeThread.ps1

File renamed without changes.

‎TestHarnesses/T1055_ProcessInjection/ProcessHerpderp.Tests.ps1 ‎Windows/TestHarnesses/T1055_ProcessInjection/ProcessHerpderp.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1055_ProcessInjection/ProcessHerpderp.ps1 ‎Windows/TestHarnesses/T1055_ProcessInjection/ProcessHerpderp.ps1

File renamed without changes.

‎TestHarnesses/T1059.001_PowerShell/OutPowerShellCommandLineParameter.Tests.ps1 ‎Windows/TestHarnesses/T1059.001_PowerShell/OutPowerShellCommandLineParameter.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1059.001_PowerShell/OutPowerShellCommandLineParameter.ps1 ‎Windows/TestHarnesses/T1059.001_PowerShell/OutPowerShellCommandLineParameter.ps1

File renamed without changes.

‎TestHarnesses/T1078.003_ValidAccounts/LogonUser.Tests.ps1 ‎Windows/TestHarnesses/T1078.003_ValidAccounts/LogonUser.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1078.003_ValidAccounts/LogonUser.ps1 ‎Windows/TestHarnesses/T1078.003_ValidAccounts/LogonUser.ps1

File renamed without changes.

‎TestHarnesses/T1127.001_MSBuild/InvokeMSBuild.Tests.ps1 ‎Windows/TestHarnesses/T1127.001_MSBuild/InvokeMSBuild.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1127.001_MSBuild/InvokeMSBuild.ps1 ‎Windows/TestHarnesses/T1127.001_MSBuild/InvokeMSBuild.ps1

File renamed without changes.

‎TestHarnesses/T1134.001_TokenImpersonation/TokenImpersonation.Tests.ps1 ‎Windows/TestHarnesses/T1134.001_TokenImpersonation/TokenImpersonation.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1134.001_TokenImpersonation/TokenImpersonation.ps1 ‎Windows/TestHarnesses/T1134.001_TokenImpersonation/TokenImpersonation.ps1

File renamed without changes.

‎TestHarnesses/T1134.002_CreateProcessWithToken/CreateProcessWithToken.Tests.ps1 ‎Windows/TestHarnesses/T1134.002_CreateProcessWithToken/CreateProcessWithToken.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1134.002_CreateProcessWithToken/CreateProcessWithToken.ps1 ‎Windows/TestHarnesses/T1134.002_CreateProcessWithToken/CreateProcessWithToken.ps1

File renamed without changes.

‎TestHarnesses/T1134.004_ParentPIDSpoofing/PPIDSpoof.Tests.ps1 ‎Windows/TestHarnesses/T1134.004_ParentPIDSpoofing/PPIDSpoof.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1134.004_ParentPIDSpoofing/PPIDSpoof.ps1 ‎Windows/TestHarnesses/T1134.004_ParentPIDSpoofing/PPIDSpoof.ps1

File renamed without changes.

‎TestHarnesses/T1218.001_CompiledHTMLFile/InvokeCompiledHTMLFile.Tests.ps1 ‎Windows/TestHarnesses/T1218.001_CompiledHTMLFile/InvokeCompiledHTMLFile.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1218.001_CompiledHTMLFile/InvokeCompiledHTMLFile.ps1 ‎Windows/TestHarnesses/T1218.001_CompiledHTMLFile/InvokeCompiledHTMLFile.ps1

File renamed without changes.

‎TestHarnesses/T1218.005_Mshta/InvokeHTMLApplication.Tests.ps1 ‎Windows/TestHarnesses/T1218.005_Mshta/InvokeHTMLApplication.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1218.005_Mshta/InvokeHTMLApplication.ps1 ‎Windows/TestHarnesses/T1218.005_Mshta/InvokeHTMLApplication.ps1

File renamed without changes.

‎TestHarnesses/T1218.007_Msiexec/Dependencies/LICENSE.TXT ‎Windows/TestHarnesses/T1218.007_Msiexec/Dependencies/LICENSE.TXT

File renamed without changes.

‎TestHarnesses/T1218.007_Msiexec/Dependencies/Microsoft.Deployment.WindowsInstaller.dll ‎Windows/TestHarnesses/T1218.007_Msiexec/Dependencies/Microsoft.Deployment.WindowsInstaller.dll

File renamed without changes.

‎TestHarnesses/T1218.007_Msiexec/InvokeMSI.Tests.ps1 ‎Windows/TestHarnesses/T1218.007_Msiexec/InvokeMSI.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1218.007_Msiexec/InvokeMSI.ps1 ‎Windows/TestHarnesses/T1218.007_Msiexec/InvokeMSI.ps1

File renamed without changes.

‎TestHarnesses/T1218_SignedBinaryProxyExecution/InvokeRemoteFXvGPUDisablementCommand.Tests.ps1 ‎Windows/TestHarnesses/T1218_SignedBinaryProxyExecution/InvokeRemoteFXvGPUDisablementCommand.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1218_SignedBinaryProxyExecution/InvokeRemoteFXvGPUDisablementCommand.ps1 ‎Windows/TestHarnesses/T1218_SignedBinaryProxyExecution/InvokeRemoteFXvGPUDisablementCommand.ps1

File renamed without changes.

‎TestHarnesses/T1543.003_WindowsService/DriverInstaller.Tests.ps1 ‎Windows/TestHarnesses/T1543.003_WindowsService/DriverInstaller.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1543.003_WindowsService/DriverInstaller.ps1 ‎Windows/TestHarnesses/T1543.003_WindowsService/DriverInstaller.ps1

File renamed without changes.

‎TestHarnesses/T1574.012_COR_PROFILER/LoadCORProfiler.Tests.ps1 ‎Windows/TestHarnesses/T1574.012_COR_PROFILER/LoadCORProfiler.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

‎TestHarnesses/T1574.012_COR_PROFILER/LoadCORProfiler.ps1 ‎Windows/TestHarnesses/T1574.012_COR_PROFILER/LoadCORProfiler.ps1

File renamed without changes.

‎Tests/Module.Tests.ps1 ‎Windows/Tests/Module.Tests.ps1

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Set-StrictMode -Version Latest
22

33
$TestScriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
4-
$ModuleRoot = Resolve-Path "$TestScriptRoot\.."
4+
$ModuleRoot = Resolve-Path "$TestScriptRoot\..\..\"
55
$ModuleManifest = "$ModuleRoot\AtomicTestHarnesses.psd1"
66

77
Remove-Module [A]tomicTestHarnesses

0 commit comments

Comments
 (0)