{"id":36630,"date":"2019-12-06T12:14:47","date_gmt":"2019-12-06T11:14:47","guid":{"rendered":"https:\/\/archief.betaalvereniging.nl\/?page_id=36630"},"modified":"2019-12-06T12:14:47","modified_gmt":"2019-12-06T11:14:47","slug":"genesis","status":"publish","type":"page","link":"https:\/\/archief.betaalvereniging.nl\/en\/safety\/genesis\/","title":{"rendered":"Genesis"},"content":{"rendered":"<div id=\"pl-36630\"  class=\"panel-layout\" ><div id=\"pg-36630-0\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-36630-0-0\"  class=\"panel-grid-cell\" ><div id=\"panel-36630-0-0-0\" class=\"panel widget widget_black_studio_tinymce panel-first-child panel-last-child\" data-index=\"0\" ><div class=\"textwidget\"><p class=\"c-intro\">Periodically testing the effectiveness of the defensive security measures that are in place, is required. To combat this, Genesis has been developed. One of the FI-ISAC members is currently using the Genesis framework for repeatedly generating unique test cases.<\/p>\n<\/div><\/div><\/div><div id=\"pgc-36630-0-1\"  class=\"panel-grid-cell\" ><div id=\"panel-36630-0-1-0\" class=\"panel widget widget_black_studio_tinymce panel-first-child panel-last-child\" data-index=\"1\" ><div class=\"textwidget\"><p>Periodically testing the effectiveness of the defensive security measures that are in place, is required. Over time, rules or products that used to work, might not function as expected. Creating effective tests is a tedious and time consuming process which also requires in-depth technical knowledge. Even then, most tests are written once and used in all future tests. This might result in the detection of the test, rather than the used technique(s). To combat this, Genesis has been developed.<\/p>\n<h3>What is Genesis?<\/h3>\n<p>Genesis is a framework that is used to repeatedly generate customised yet unique test cases, based on a given snippet. A snippet is a template that contains meta data and code. The meta data is used when searching through all snippets, whereas the code is used to create \u201cbenign malware\u201d. All the snippets are mapped to the MITRE ATT&amp;CK framework. The generated test cases can then be executed on the targeted machine, after which the rules of the in-place security measures should provide alerts regarding the test case.<\/p>\n<h3>Multiple languages<\/h3>\n<p>Genesis supports multiple languages, is suitable to use on any platform that can run Java 8 EE and NPM, and contains multiple obfuscation profiles to differentiate how much a test case should be obfuscated. Optionally, one can provide user input prior to the obfuscation to further customise the test case.<\/p>\n<h3>Versatile platform<\/h3>\n<p>Genesis can also serve as an extension of existing platforms such as Cobalt Strike or the Metasploit Framework. This makes the platform more versatile and useful when certain test techniques are already in place.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pg-36630-1\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-36630-1-0\"  class=\"panel-grid-cell\" ><div id=\"panel-36630-1-0-0\" class=\"panel widget widget_black_studio_tinymce panel-first-child panel-last-child\" data-index=\"2\" ><div class=\"textwidget\"><h2 class=\"c-header-line\">Documentation<\/h2>\n<\/div><\/div><\/div><div id=\"pgc-36630-1-1\"  class=\"panel-grid-cell\" ><div id=\"panel-36630-1-1-0\" class=\"panel widget widget_black_studio_tinymce panel-first-child panel-last-child\" data-index=\"3\" ><div class=\"textwidget\"><p>You can find the necessary information here.<\/p>\n<p><a href=\"https:\/\/github.com\/ThisIsLibra\/genesis\" target=\"_blank\" rel=\"noopener\">Documentation Genesis<\/a><\/p>\n<\/div><\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Genesis is a framework that is used to repeatedly generate customised yet unique test cases, based on a given snippet.<\/p>\n","protected":false},"author":8,"featured_media":36577,"parent":5358,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-36630","page","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/pages\/36630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/comments?post=36630"}],"version-history":[{"count":11,"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/pages\/36630\/revisions"}],"predecessor-version":[{"id":36709,"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/pages\/36630\/revisions\/36709"}],"up":[{"embeddable":true,"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/pages\/5358"}],"wp:attachment":[{"href":"https:\/\/archief.betaalvereniging.nl\/en\/wp-json\/wp\/v2\/media?parent=36630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}