├── LICENSE ├── README.md ├── hardening_policies ├── HP_0001_windows_LocalAccountTokenFilterPolicy.yml └── hardeningpolicies.yml.template ├── images ├── atc_scheme_v2.jpg ├── basics.jpeg ├── hp_confl_v1.png ├── hp_md_v1.png ├── hp_yaml_v1.png ├── logo_v1.png ├── mp_cinfl_v1.png ├── mp_md_v1.png ├── mp_yaml_v1.png ├── ms_confl_v1.png ├── ms_md_v1.png └── ms_yaml_v1.png ├── mitigation_policies ├── MP_0001_windows_asr_block_credential_stealing_from_lsass.yml └── mitigation_policy.yml.template └── mitigation_systems ├── MS_0001_microsoft_defender_advanced_threat_protection.yml └── mitigation_system.yml.template /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/README.md -------------------------------------------------------------------------------- /hardening_policies/HP_0001_windows_LocalAccountTokenFilterPolicy.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/hardening_policies/HP_0001_windows_LocalAccountTokenFilterPolicy.yml -------------------------------------------------------------------------------- /hardening_policies/hardeningpolicies.yml.template: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/hardening_policies/hardeningpolicies.yml.template -------------------------------------------------------------------------------- /images/atc_scheme_v2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/atc_scheme_v2.jpg -------------------------------------------------------------------------------- /images/basics.jpeg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/basics.jpeg -------------------------------------------------------------------------------- /images/hp_confl_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/hp_confl_v1.png -------------------------------------------------------------------------------- /images/hp_md_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/hp_md_v1.png -------------------------------------------------------------------------------- /images/hp_yaml_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/hp_yaml_v1.png -------------------------------------------------------------------------------- /images/logo_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/logo_v1.png -------------------------------------------------------------------------------- /images/mp_cinfl_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/mp_cinfl_v1.png -------------------------------------------------------------------------------- /images/mp_md_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/mp_md_v1.png -------------------------------------------------------------------------------- /images/mp_yaml_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/mp_yaml_v1.png -------------------------------------------------------------------------------- /images/ms_confl_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/ms_confl_v1.png -------------------------------------------------------------------------------- /images/ms_md_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/ms_md_v1.png -------------------------------------------------------------------------------- /images/ms_yaml_v1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/images/ms_yaml_v1.png -------------------------------------------------------------------------------- /mitigation_policies/MP_0001_windows_asr_block_credential_stealing_from_lsass.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/mitigation_policies/MP_0001_windows_asr_block_credential_stealing_from_lsass.yml -------------------------------------------------------------------------------- /mitigation_policies/mitigation_policy.yml.template: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/mitigation_policies/mitigation_policy.yml.template -------------------------------------------------------------------------------- /mitigation_systems/MS_0001_microsoft_defender_advanced_threat_protection.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/mitigation_systems/MS_0001_microsoft_defender_advanced_threat_protection.yml -------------------------------------------------------------------------------- /mitigation_systems/mitigation_system.yml.template: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/atc-project/atc-mitigation/HEAD/mitigation_systems/mitigation_system.yml.template --------------------------------------------------------------------------------