Mon, 01 Jan 0001 00:00:00 +0000
Test ITF

# 1. Setup Logging
$LogFile = "C:\temp\lab_execution.log"
if (!(Test-Path "C:\temp")) { New-Item -Path "C:\temp" -ItemType Directory | Out-Null }

function Write-LabLog {
    param([string]$Message)
    $Timestamp = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
    "$Timestamp - $Message" | Out-File -FilePath $LogFile -Append
}

# 2. Define the IT-focused techniques
$Techniques = @(
    @{ ID = "T1098"; Test = 1 ; Name = "Account Manipulation (Add User to Admin Group)" },
    @{ ID = "T1562.001"; Test = 11 ; Name = "Disable Security Tools (Proxy/Firewall Registry)" },
    @{ ID = "T1547.009"; Test = 1 ; Name = "Shortcut Modification (LNK Hijacking)" }
)

Write-Host "--- Starting IT Essentials Lab Simulation ---" -ForegroundColor Cyan
Write-LabLog "STARTING IT ESSENTIALS SIMULATION"

foreach ($Item in $Techniques) {
    Write-Host "`n[!] Deploying: $($Item.Name)" -ForegroundColor Yellow
    Write-LabLog "Deploying: $($Item.Name) ($($Item.ID))"
    
    try {
        # Get Prereqs (Required for downloading dummy LNK files or tools)
        Invoke-AtomicTest $($Item.ID) -TestNumbers $($Item.Test) -GetPrereqs -ErrorAction SilentlyContinue | Out-Null
        
        # Run the Test
        Invoke-AtomicTest $($Item.ID) -TestNumbers $($Item.Test) -Confirm:$false | Out-Null
        
        Write-LabLog "SUCCESS: $($Item.ID) Test $($Item.Test) deployed."
    } catch {
        Write-LabLog "ERROR: Failed $($Item.ID). $_"
    }
}

Write-Host "`n[+] Simulation Complete. Have the team check Local Admins, Proxy settings, and Desktop Shortcuts." -ForegroundColor Green
Cleanup
Project Notes on Garrettoh's Research / Blog

Test ITF
