chain-reactor

Chain Reactor Chain Reactor es una herramienta de código abierto para probar la cobertura de detección y respuesta en máquinas Linux. La herramienta genera ejecutables que simulan secuencias de acciones como la creación de procesos y la conexión de red. Chain Reactor no asume experiencia previa e...

atomic-red-team

Atomic Red Team Atomic Red Team™ es una biblioteca de pruebas asociadas al framework MITRE ATT&CK®. Los equipos de seguridad pueden usar Atomic Red Team para probar sus entornos de manera rápida, portable y reproducible. Comenzar Puede ejecutar pruebas atómicas directamente desde la línea de...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

Elemental

Elemental Elemental es una biblioteca centralizada de amenazas de técnicas MITRE ATT&CK, pruebas de Atomic Red Team y más de 280 reglas Sigma. Proporciona una forma alternativa de explorar el conjunto de datos ATT&CK, mapeando las pruebas relevantes de Atomic Red Team y las reglas Sigma a su...

Atomic-Red-Team-C2

DESCRIPTION ARTC2 is a modern execution framework that helps security teams scale attack scenario execution from single and multi-breach point targets. It intends to produce actionable attack intel that improves the effectiveness of security products and incident response. OS-SUPPORT Windows OS...

RedTeamSimmer

RedTeamSimmer The UI You've Always Wanted for Atomic Red Team A Web Based Adversary Emulation Platform and Atomic Red Team Test Orchestration. Overview RedTeamSimmer is an open-source, web based adversary emulation platform providing a modern UI for orchestrating Atomic Red Team tests across...

attack_range

Splunk Attack Range v5 Splunk Attack Range 构建配有仪器的云环境（AWS、Azure、GCP），模拟攻击，并将数据转发到 Splunk，用于检测开发和测试。 它的功能： 构建实验环境 — 通过 Terraform 和 Ansible 部署一个小型、类似生产环境的实验环境（Splunk、Windows/Linux 服务器、可选的 Kali、Zeek 等）。 模拟攻击 — 运行 Atomic Red Team（及其他）技术以生成真实的遥测数据。 共享访问 — 使用 WireGuard VPN；生成额外的客户端配置以与他人共享该实验环境。 点击图片观看...

SentinelOne-ATTACK-Queries

Consultas de SentinelOne mapeadas con ATT&CK Consultas mapeadas con MITRE ATT&CK para SentinelOne Deep Visiblity DISCONTINUADO Este proyecto ha sido reemplazado por el repositorioSentinelOne-Queries que avanza hacia firmas compartibles y para uso en herramientas. El nuevo repositorio se basa en e...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

atomic-operator

license atomic-operator Este paquete de Python se utiliza para ejecutar pruebas de Atomic Red Team Atómicas en múltiples entornos de sistemas operativos. ¿Qué hay de nuevo? ¿Por qué? atomic-operator permite a los profesionales de seguridad probar sus capacidades de detección y defensa contra las...

Network Threats: A Step-by-Step Attack Demonstration

Follow this real-life network attack simulation, covering 6 steps from Initial Access to Data Exfiltration. See how attackers remain undetected with the simplest tools and why you need multiple choke points in your defense strategy. Surprisingly, most network attacks are not exceptionally...

PurpleKeep - Providing Azure Pipelines To Create An Infrastructure And Run Atomic Tests

With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually re-running...

PurpleOps - An Open-Source Self-Hosted Purple Team Management Web Application

An open-source self-hosted purple team management web application. Key Features Template engagements and testcases Framework friendly Role-based Access Control & MFA Inbuilt DOCX reporting + custom template support How PurpleOps is different: No attribution needed Hackable, no "no-reversing"...

Trawler - PowerShell Script To Help Incident Responders Discover Adversary Persistence Mechanisms

Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...

AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic

This repository is a documentation of my adventures with Stratus Red Team - a tool for adversary emulation for the cloud. Stratus Red Team is "Atomic Red Team for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner. We run the attacks covered in the...

Elemental - An MITRE ATTACK Threat Library

Elemental is a centralized threat library of MITRE ATT&CK techniques, Atomic Red Team tests, and over 280 Sigma rules. It provides an alternative way to explore the ATT&CK dataset, mapping relevant Atomic Red Team tests and Sigma rules to their respective technique. Elemental allows defenders to...

RedHunt OS v2 - Virtual Machine For Adversary Emulation And Threat Hunting

Virtual Machine for Adversary Emulation and Threat Hunting by RedHunt Labs RedHunt OS aims to be a one stop shop for all your threat emulation and threat hunting needs by integrating attacker's arsenal as well as defender's toolkit to actively identify the threats in your environment. Base Machin...

Mature Your Threat Hunting by Testing Your Visibility

Threat hunting starts with a hypothesis. Without a hypothesis, you’re just combing through log files - and that isn’t threat hunting. Once you have a hypothesis, you can begin your search, but you won’t always find a hacker. Testing, like the open source tests available from Red Canary’s Atomic R...