atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

Elemental

Elemental Elemental is a centralized threat library of MITRE ATT&CK techniques, Atomic Red Team tests, and over 280 Sigma rules. It provides an alternative way to explore the ATT&CK dataset, mapping relevant Atomic Red Team tests and Sigma rules to their respective technique. Elemental allows...

Atomic-Red-Team-C2

DESCRIPTION ARTC2 is a modern execution framework that helps security teams scale attack scenario execution from single and multi-breach point targets. It intends to produce actionable attack intel that improves the effectiveness of security products and incident response. OS-SUPPORT Windows OS...

RedTeamSimmer

RedTeamSimmer La interfaz que siempre has querido para Atomic Red Team Una plataforma de emulación de adversarios basada en web y orquestación de pruebas de Atomic Red Team. Descripción general RedTeamSimmer es una plataforma de emulación de adversarios de código abierto basada en web que...

atomic-red-team

Atomic Red Team Atomic Red Team™ es una biblioteca de pruebas asociadas al framework MITRE ATT&CK®. Los equipos de seguridad pueden usar Atomic Red Team para probar sus entornos de manera rápida, portable y reproducible. Comenzar Puede ejecutar pruebas atómicas directamente desde la línea de...

attack_range

Splunk Attack Range v5 Splunk Attack Range 构建配有仪器的云环境（AWS、Azure、GCP），模拟攻击，并将数据转发到 Splunk，用于检测开发和测试。 它的功能： 构建实验环境 — 通过 Terraform 和 Ansible 部署一个小型、类似生产环境的实验环境（Splunk、Windows/Linux 服务器、可选的 Kali、Zeek 等）。 模拟攻击 — 运行 Atomic Red Team（及其他）技术以生成真实的遥测数据。 共享访问 — 使用 WireGuard VPN；生成额外的客户端配置以与他人共享该实验环境。 点击图片观看...

chain-reactor

Chain Reactor Chain Reactor 是一个用于测试 Linux 机器上检测与响应覆盖率的开源工具。该工具生成可执行文件，用于模拟进程创建、网络连接等操作序列。Chain Reactor 不需要事先具备工程经验；该工具使用 JSON，因此自定义其行为就像编辑一个文件一样简单。 开始使用 有关安装和使用说明，请参阅 wiki 的入门页面。 了解更多 Chain Reactor 文档以 wiki 形式提供。 有关原子项目系列的理念和开发信息，请访问我们的网站 https://atomicredteam.io。 请查看许可证了解有关分发和修改 Chain Reactor 的信...

SentinelOne-ATTACK-Queries

Consultas de SentinelOne mapeadas con ATT&CK Consultas mapeadas con MITRE ATT&CK para SentinelOne Deep Visiblity DISCONTINUADO Este proyecto ha sido reemplazado por el repositorioSentinelOne-Queries que avanza hacia firmas compartibles y para uso en herramientas. El nuevo repositorio se basa en e...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

atomic-operator

license atomic-operator 此 Python 包用于在多种操作系统环境中执行 Atomic Red Team 测试（Atomics）。 新增内容？ 为什么？ atomic-operator 使安全专业人员能够针对 atomic-red-team 中定义的既定技术测试其检测和防御能力。通过使用 atomic-operator 这样的测试框架，您可以识别自己的防御能力以及防御覆盖范围的缺口。 此外，atomic-operator 还可用于许多其他场景，例如： 生成警报以测试产品 测试 EDR 和其他安全工具 从对手角度识别执行防御规避的方法 等等。 特性 支持在...

Network Threats: A Step-by-Step Attack Demonstration

Follow this real-life network attack simulation, covering 6 steps from Initial Access to Data Exfiltration. See how attackers remain undetected with the simplest tools and why you need multiple choke points in your defense strategy. Surprisingly, most network attacks are not exceptionally...

PurpleKeep - Providing Azure Pipelines To Create An Infrastructure And Run Atomic Tests

With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually re-running...

PurpleOps - An Open-Source Self-Hosted Purple Team Management Web Application

An open-source self-hosted purple team management web application. Key Features Template engagements and testcases Framework friendly Role-based Access Control & MFA Inbuilt DOCX reporting + custom template support How PurpleOps is different: No attribution needed Hackable, no "no-reversing"...

Trawler - PowerShell Script To Help Incident Responders Discover Adversary Persistence Mechanisms

Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...

AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic

This repository is a documentation of my adventures with Stratus Red Team - a tool for adversary emulation for the cloud. Stratus Red Team is "Atomic Red Team for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner. We run the attacks covered in the...

Elemental - An MITRE ATTACK Threat Library

Elemental is a centralized threat library of MITRE ATT&CK techniques, Atomic Red Team tests, and over 280 Sigma rules. It provides an alternative way to explore the ATT&CK dataset, mapping relevant Atomic Red Team tests and Sigma rules to their respective technique. Elemental allows defenders to...

RedHunt OS v2 - Virtual Machine For Adversary Emulation And Threat Hunting

Virtual Machine for Adversary Emulation and Threat Hunting by RedHunt Labs RedHunt OS aims to be a one stop shop for all your threat emulation and threat hunting needs by integrating attacker's arsenal as well as defender's toolkit to actively identify the threats in your environment. Base Machin...

Mature Your Threat Hunting by Testing Your Visibility

Threat hunting starts with a hypothesis. Without a hypothesis, you’re just combing through log files - and that isn’t threat hunting. Once you have a hypothesis, you can begin your search, but you won’t always find a hacker. Testing, like the open source tests available from Red Canary’s Atomic R...