Initial acess simulation tests

• atomic-red-team

  32 9,059 9.7 C

  Small and highly portable detection tests based on MITRE's ATT&CK.

  

Do some searches for adversary tactics, techniques, and procedures (TTPs) mapped tothe MITRE ATT&CK framework at https://attack.mitre.org/ or go to the website and look at the Groups tab to see some of the TTP IDs for a given group. What you are wanting to do is map a given attack chain to those TTP IDs and note them down. Those IDs are what another poster mentioned for a tool like Red Canary's Atomic Red Team at https://github.com/redcanaryco/atomic-red-team There are other tools that do similar stuff but that is a great suggestion. When you go to the Atomic Red Team "atomics" folder you will see the tests broken down by those TTP IDs you've noted down. So then you can look at the tests. Depending on your test machines you may need to modify them for their specifics, but the the tests should give you enough information to see if you need or want to customize.

• attack-stix-data

  58 284 4.1 Python

  STIX data representing MITRE ATT&CK

  

Do some searches for adversary tactics, techniques, and procedures (TTPs) mapped tothe MITRE ATT&CK framework at https://attack.mitre.org/ or go to the website and look at the Groups tab to see some of the TTP IDs for a given group. What you are wanting to do is map a given attack chain to those TTP IDs and note them down. Those IDs are what another poster mentioned for a tool like Red Canary's Atomic Red Team at https://github.com/redcanaryco/atomic-red-team There are other tools that do similar stuff but that is a great suggestion. When you go to the Atomic Red Team "atomics" folder you will see the tests broken down by those TTP IDs you've noted down. So then you can look at the tests. Depending on your test machines you may need to modify them for their specifics, but the the tests should give you enough information to see if you need or want to customize.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• ace-firefist

  1 16 5.3 Python

  Attack chain emulator. Write recipes for initial access easily

To test initial access with file execution can try something like https://github.com/dobin/ace-firefist

Suggest a related project