search

redcanaryco / invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.
MIT License
805 stars 190 forks source link

Idea: Add parameter to output test GUID before running command #142

Closed MSAdministrator closed 1 year ago

MSAdministrator commented 1 year ago

Use-cases

As a user, I want to output the current test GUID before running the test so that it will be easier to identify which test ran in logging mechanisms.

Another idea is to also set this to an environment variable as well.

Proposal

Add an optional Boolean command line parameter named

—AddGUIDPrefix

which would then prefix the command with something like

echo “{TEST GUID}” && {run test normally}

References

https://atomicredteam.slack.com/archives/CTXD5274M/p1689173909822249

clr2of8 commented 1 year ago

It appears that the method that the AtomicRunner functionality provides as described here is ideal as the host running atomic tests is renamed to include the GUID automatically before each test and many/most security products including the hostname in their telemetry. In consideration of this, I'll close this request for now. Thank you