Generate docs from job=validate_atomics_generate_docs branch=master

redcanaryco · Sep 3, 2019 · 3899ee0 · 3899ee0
1 parent e498174
commit 3899ee0
Show file tree

Hide file tree

Showing 4 changed files with 33 additions and 0 deletions.
diff --git a/atomics/T1217/T1217.md b/atomics/T1217/T1217.md
@@ -12,6 +12,8 @@ Specific storage locations vary based on platform and/or application, but browse
 
 - [Atomic Test #2 - List Mozilla Firefox Bookmark Database Files on macOS](#atomic-test-2---list-mozilla-firefox-bookmark-database-files-on-macos)
 
+- [Atomic Test #3 - List Google Chrome Bookmark JSON Files on macOS](#atomic-test-3---list-google-chrome-bookmark-json-files-on-macos)
+
 
 <br/>
 
@@ -44,4 +46,20 @@ find / -path "*/Firefox/Profiles/*/places.sqlite" -exec echo {} >> /tmp/firefox-
 
 
 
+<br/>
+<br/>
+
+## Atomic Test #3 - List Google Chrome Bookmark JSON Files on macOS
+Searches for Google Chrome's Bookmark file (on macOS) that contains bookmarks in JSON format and lists any found instances to a text file.
+
+**Supported Platforms:** macOS
+
+
+#### Run it with `sh`! 
+```
+find / -path "*/Google/Chrome/*/Bookmarks" -exec echo {} >> /tmp/chrome-bookmarks.txt \;
+```
+
+
+
 <br/>
diff --git a/atomics/index.md b/atomics/index.md
@@ -427,6 +427,7 @@
 - [T1217 Browser Bookmark Discovery](./T1217/T1217.md)
   - Atomic Test #1: List Mozilla Firefox Bookmark Database Files on Linux [linux]
   - Atomic Test #2: List Mozilla Firefox Bookmark Database Files on macOS [macos]
+  - Atomic Test #3: List Google Chrome Bookmark JSON Files on macOS [macos]
 - [T1482 Domain Trust Discovery](./T1482/T1482.md)
   - Atomic Test #1: Windows - Discover domain trusts with dsquery [windows]
   - Atomic Test #2: Windows - Discover domain trusts with nltest [windows]

diff --git a/atomics/index.yaml b/atomics/index.yaml
@@ -12494,6 +12494,19 @@ discovery:
         command: 'find / -path "*/Firefox/Profiles/*/places.sqlite" -exec echo {}
           >> /tmp/firefox-bookmarks.txt \;
 
+'
+    - name: List Google Chrome Bookmark JSON Files on macOS
+      description: 'Searches for Google Chrome''s Bookmark file (on macOS) that contains
+        bookmarks in JSON format and lists any found instances to a text file.
+
+'
+      supported_platforms:
+      - macos
+      executor:
+        name: sh
+        command: 'find / -path "*/Google/Chrome/*/Bookmarks" -exec echo {} >> /tmp/chrome-bookmarks.txt
+          \;
+
 '
   T1482:
     technique:

diff --git a/atomics/macos-index.md b/atomics/macos-index.md
@@ -67,6 +67,7 @@
 - [T1010 Application Window Discovery](./T1010/T1010.md)
 - [T1217 Browser Bookmark Discovery](./T1217/T1217.md)
   - Atomic Test #2: List Mozilla Firefox Bookmark Database Files on macOS [macos]
+  - Atomic Test #3: List Google Chrome Bookmark JSON Files on macOS [macos]
 - [T1083 File and Directory Discovery](./T1083/T1083.md)
   - Atomic Test #3: Nix File and Diectory Discovery [macos, linux]
   - Atomic Test #4: Nix File and Directory Discovery [macos, linux]