adversary-emulation

Scalable Automated Adversary Emulation Platform

Utilities for MITRE™ ATT&CK

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

The largest, public library of adversary emulation plans in JSON. A place to share custom SCYTHE threats with the community. #ThreatThursday

A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study. Doctor of Science Cybersecurity at Marymount University Dissertation by Xena Olsen.

See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)

Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.

Manticore Adversary Emulation Cli

A cross-platform Nim implant for Prelude Operator

Supporting material for my presentation "Adversarial Threat Modelling — A Practical Approach to Purple Teaming in the Enterprise"

Manticore's Public Threats Repository

This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense

ATT&CK Evaluations Website

Manticore's Public Threat Scenarios

This work shows the viability of automatically generated attack graphs that are used for adversary behavior execution in industrial control system environments. This viability is evaluated and confirmed with expert interviews about results of this thesis, generated attack graphs and an implemented prototype.

A CALDERA plugin

A simple C2 emulation tool

An REST API client library for Prelude Operator.