Skip to content

Instantly share code, notes, and snippets.

@mehaase
Last active June 9, 2022 12:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mehaase/35ac0501532e127d9e70b3b314408cdc to your computer and use it in GitHub Desktop.
Save mehaase/35ac0501532e127d9e70b3b314408cdc to your computer and use it in GitHub Desktop.

Mermaid Test

Making a Markdown file that has embedded mermaid graph.

flowchart
  classDef action color:black,fill:pink
  classDef asset color:black,fill:lightblue
  classDef property color:black,fill:lightgreen

  http://flow-1/action-1(T1566.002\nSpearphishing Link):::action
  http://flow-1/action-3(T1218.011: Signed\nBinary Proxy\nExecution: Rundll32):::action
  http://flow-1/action-13(T1033: System\nOwner/User Discovery):::action
  http://flow-1/action-14(T1069: Permission\nGroups Discovery):::action
  http://flow-1/action-15(T1018: Remote System\nDiscovery):::action
  http://flow-1/action-16(T1046:Network\nService Scanning):::action
  http://flow-1/action-20(T1134: Access Token\nManipulation):::action
  http://flow-1/action-25(T1021.002:SMB/Windows\nAdmin Shares):::action
  http://flow-1/action-28(T1021.001: Remote\nDesktop Protocol):::action
  http://flow-1/action-30(T1484.001: Group\nPolicy Modification):::action
  http://flow-1/action-32(T1562:  Impair\nDefenses):::action
  http://flow-1/action-35(T1021.002:SMB/Windows\nAdmin Shares):::action
  http://flow-1/action-36(T1569.002: Service\nExecution):::action
  http://flow-1/action-42(T1087.002: Domain\nAccount):::action
  http://flow-1/action-46(T1486: Data\nEncrypted for Impact):::action

  http://flow-1/asset-8(IcedID DLL malware):::asset
  http://flow-1/asset-10(IcedID DLL malware):::asset
  http://flow-1/asset-12(http://flow-1/asset-12):::asset
  http://flow-1/asset-17(Info):::asset
  http://flow-1/asset-21(Domain Controller):::asset
  http://flow-1/asset-23(Info):::asset
  http://flow-1/asset-26(Other Domain\nControllers):::asset
  http://flow-1/asset-33(Group Policy):::asset
  http://flow-1/asset-37(Admin Shares):::asset
  http://flow-1/asset-39(Domain Controller):::asset
  http://flow-1/asset-43(Domain Admin Account):::asset
  http://flow-1/asset-48(All Systems):::asset

  http://flow-1/action-1 -- requires --> http://flow-1/asset-8
  http://flow-1/asset-8 -- provides --> http://flow-1/action-3
  http://flow-1/action-3 -- requires --> http://flow-1/asset-10
  http://flow-1/action-3 -- requires --> http://flow-1/asset-12
  http://flow-1/asset-12 -- provides --> http://flow-1/action-13
  http://flow-1/asset-12 -- provides --> http://flow-1/action-14
  http://flow-1/asset-12 -- provides --> http://flow-1/action-15
  http://flow-1/action-14 -- requires --> http://flow-1/asset-17
  http://flow-1/action-13 -- requires --> http://flow-1/asset-17
  http://flow-1/action-15 -- requires --> http://flow-1/asset-17
  http://flow-1/asset-17 -- provides --> http://flow-1/action-20
  http://flow-1/action-20 -- requires --> http://flow-1/asset-21
  http://flow-1/action-16 -- requires --> http://flow-1/asset-23
  http://flow-1/action-30 -- requires --> http://flow-1/asset-33
  http://flow-1/action-32 -- requires --> http://flow-1/asset-33
  http://flow-1/asset-21 -- provides --> http://flow-1/action-25
  http://flow-1/action-25 -- requires --> http://flow-1/asset-26
  http://flow-1/asset-26 -- provides --> http://flow-1/action-16
  http://flow-1/asset-23 -- provides --> http://flow-1/action-35
  http://flow-1/asset-23 -- provides --> http://flow-1/action-36
  http://flow-1/action-36 -- requires --> http://flow-1/asset-37
  http://flow-1/action-35 -- requires --> http://flow-1/asset-37
  http://flow-1/asset-37 -- provides --> http://flow-1/action-28
  http://flow-1/action-28 -- requires --> http://flow-1/asset-39
  http://flow-1/asset-39 -- provides --> http://flow-1/action-32
  http://flow-1/asset-39 -- provides --> http://flow-1/action-30
  http://flow-1/asset-33 -- provides --> http://flow-1/action-42
  http://flow-1/action-42 -- requires --> http://flow-1/asset-43
  http://flow-1/asset-43 -- provides --> http://flow-1/action-46
  http://flow-1/action-46 -- requires --> http://flow-1/asset-48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment