search

redcanaryco / invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.
MIT License
818 stars 194 forks source link

Re-implementation of Get-AtomicTechnique #9

Closed mgraeber-rc closed 4 years ago

mgraeber-rc commented 4 years ago

I re-implemented Get-AtomicTechnique. The function now does the following:

  1. Performs atomic technique YAML validation. Techniques/tests that require a fix will output an error and not return a parsed object. Recommended fixes will output a warning but will return a parsed object.
  2. Previously, Get-AtomicTechnique returned the raw output of ConvertFrom-Yaml, a hashtable. Now, a proper object is returned.
  3. Get-AtomicTechnique supports pipeline input from Get-ChildItem.
  4. It supports parsing a raw YAML string.

Tested on: