Implant drop-in for EDR testing

Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques

BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detections via yaml files

A tool to run and validate telemetry for Atomic Red Team tests

A library of post-exploitation MacOS scripts based on threat emulation, LOObins, CTI, and MITRE ATT&CK.

This project sets up an Active Directory environment and configures Splunk to ingest events from a Windows Server and a target machine. We perform a brute force attack using Kali Linux to observe telemetry and use Atomic Red Team for additional testing. Goals: enhance IT administration skills, event monitoring, and threat detection.

Slides, notes and more related to Atomics on a Friday

A shrimple guide to deploying the Elastic Stack to create your own local SIEM setup for shrimple Windows event log shipping and analysis; for simulations and more, plus mock DFIR simulations using Atomic Red Team!

The lab involves setting up a virtualized environment with Oracle VM VirtualBox, creating Windows 10, Kali Linux, Windows Server, and Ubuntu Server VMs. Tools like Splunk, Sysmon, and Crowbar are used for security testing. Participants configure networks, join Windows to Active Directory, and practice PowerShell scripting.

Simulated SOC environment using Splunk, Sysmon & Atomic Red Team

A Kathara Framework Cyber Lab, for attack and defense emulation

Project for Project 1 course of SoICT - HUST

Homelab SOC construit sur ELK 8.19.16, MISP 2.4, Sysmon et Atomic Red Team : documentation, configurations et guides de déploiement pour une stack full open source.

Hands-on SOC lab showcasing AD attack detection and endpoint hardening using Atomic Red Team, Wazuh, and CIS compliance frameworks.

Evidence-driven purple team pipeline for SANS SEC598 — extracts ATT&CK techniques from threat reports, executes adversary emulations (Caldera + Atomic Red Team), validates detections (LimaCharlie), and produces coverage reports with per-technique proof chains

Detection engineering pipeline: 140 Sigma rules for Windows, Linux, and M365/Azure with automated CI/CD validation, Splunk conversion, and Atomic Red Team regression testing. MITRE ATT&CK mapped.

GitHub Action for local execution of Atomic Red Team tests using Invoke-Atomic

Create a complete Active Directory lab environment, configure Windows servers, and test security using tools like Kali Linux, Splunk, and Atomic Red Team.

Adversary emulation scenarios using Atomic Red Team — credential dumping, lateral movement, persistence