-
Notifications
You must be signed in to change notification settings - Fork 191
Cleanup After Executing Atomic Tests
Carrie Roberts edited this page Feb 11, 2020
·
1 revision
Many atomic tests include cleanup commands to remove temporary files generated during the execution of the test or to return setting to their previous or more secure values so that the test can be run again. Running the cleanup commands after every test execution is recommended. To see what the cleanup commands do, you can use the -ShowDetails
option as describe on the List Atomic Tests page of this Wiki.
Invoke-AtomicTest T1089 -TestNames "Uninstall Sysmon" -Cleanup
Invoke-AtomicTest T1089 -Cleanup
Questions? Get connected to the community on the Atomic Red Team Slack channel.
- Installation
- Import the Module
- List Atomic Tests
- Check/Get Prerequisites for Atomic Tests
- Execute Atomic Tests (Local)
- Execute Atomic Tests (Remote)
- Specify Custom Input Arguments
- Cleanup after Executing Atomic Tests
- Execution Logging
- Adversary Emulation
- Continuous Atomic Testing
- Execution Hooks
- Helper Functions
- The Atomic GUI
- Uninstallation