Skip to content

Pull requests: redcanaryco/atomic-red-team

New pull request New
26 Open 2,993 Closed
26 Open 2,993 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add wevtutil PowerShell log clearing test to T1070.003 5 min review windows
#3403 opened Jul 22, 2026 by Mahshid-MSH Contributor Loading…
@clr2of8 @cyberbuff
Add esentutl file extension masquerading test to T1036 5 min review windows
#3402 opened Jul 22, 2026 by Mahshid-MSH Contributor Loading…
@clr2of8 @cyberbuff
Add csvde AD automated collection test to T1119 1 min review windows
#3401 opened Jul 22, 2026 by Mahshid-MSH Contributor Loading…
@clr2of8 @cyberbuff
Add wmic availability dependency to T1220 WMIC XSL tests 1 min review
#3400 opened Jul 22, 2026 by ashish-cybersec Loading…
Add csvde discovery 1 min review windows
#3399 opened Jul 22, 2026 by Mahshid-MSH Contributor Loading…
@clr2of8 @cyberbuff
Move SyncAppvPublishingServer test to its T1216.002 sub-technique 1 min review
#3398 opened Jul 20, 2026 by ashish-cybersec Loading…
Bump typer from 0.26.8 to 0.27.0 1 min review dependencies Pull requests that update a dependency file python Pull requests that update Python code
#3397 opened Jul 20, 2026 by dependabot Bot Loading…
Bump hypothesis from 6.156.6 to 6.157.0 1 min review dependencies Pull requests that update a dependency file python Pull requests that update Python code
#3396 opened Jul 20, 2026 by dependabot Bot Loading…
Bump actions/setup-python from 6 to 7 1 min review dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
#3395 opened Jul 20, 2026 by dependabot Bot Loading…
Update to ATT&CK v19.1 30 min review
#3391 opened Jul 20, 2026 by cyberbuff Collaborator Loading…
Add T1027.001 Windows PowerShell binary padding test 1 min review
#3390 opened Jul 17, 2026 by rodrigorribeiro Loading…
@josehelps @clr2of8 @cyberbuff
Add t1036 005 wmic masquerade 1 min review windows
#3387 opened Jul 11, 2026 by Mahshid-MSH Contributor Loading…
@clr2of8 @cyberbuff
Add atomic test for T1059.012 (Command and Scripting Interpreter: Hypervisor CLI) 1 min review blocked Blocked because of a different PR or issue
#3386 opened Jul 10, 2026 by FOLKS-iwd Loading…
1 of 2 tasks
1
Add atomic test for T1059.011 (Command and Scripting Interpreter: Lua) 1 min review blocked Blocked because of a different PR or issue
#3385 opened Jul 10, 2026 by FOLKS-iwd Loading…
1 of 2 tasks
2
fix: remaining bugs in labels, models, and validator 1 min review
#3384 opened Jul 10, 2026 by kaushalrog Contributor Loading…
4
Add T1556.008 Network Provider DLL atomic test 1 min review
#3382 opened Jul 3, 2026 by einlamye Loading…
Add T1556.007 Hybrid Identity atomic tests 1 min review ADFS windows
#3381 opened Jul 3, 2026 by einlamye Loading…
@patel-bhavin @clr2of8 @cyberbuff
Add T1556.005 Reversible Encryption atomic tests 5 min review
#3380 opened Jul 3, 2026 by einlamye Loading…
Add T1556.006 Multi-Factor Authentication atomic tests 5 min review
#3379 opened Jul 3, 2026 by einlamye Loading…
Add T1556.009 Conditional Access Policies atomic tests 1 min review ADFS cloud
#3378 opened Jul 3, 2026 by einlamye Loading…
@patel-bhavin
Add T1546.017 - Udev Rules persistence (Event Triggered Execution) 1 min review linux
#3376 opened Jun 28, 2026 by Aryu-RU Contributor Loading…
@josehelps @cyberbuff
Add T1620 - Linux fileless ELF execution via memfd_create 1 min review linux
#3374 opened Jun 28, 2026 by Aryu-RU Contributor Loading…
@josehelps @cyberbuff
T1555.006: add AWS Secrets Manager bulk retrieval atomic (BatchGetSecretValue) 1 min review cloud
#3373 opened Jun 26, 2026 by adamalizeerj Loading…
@patel-bhavin
2
Fix formatting crash in validator.py 1 min review
#3362 opened Jun 12, 2026 by kaushalrog Contributor Loading…
3
Add T1213.005 - Data from Information Repositories: Messaging Applications (Slack & Teams API collection) 5 min review blocked Blocked because of a different PR or issue
#3359 opened Jun 12, 2026 by DevamShah Contributor Loading…
1
ProTip! What’s not been updated in a month: updated:<2026-06-25.