atomic-red-team Documentation

Small and highly portable detection tests based on MITRE's ATT&CK.

11,921 stars C C 1 file ยท ~1,138 tokens #mitre#mitre-attack
RAW Doc

Technical Documentation: redcanaryco/atomic-red-team

โ„น๏ธ Provenance: Hybrid Fusion: redcanaryco/atomic-red-team (README + 1 In-Tree Chapters) ยท CodeWiki Reference ยท Recency: Active (< 180 days)

1. Project Overview & Quickstart (redcanaryco/atomic-red-team)

Atomic Red Team

Atomic Red Teamโ„ข is a library of tests mapped to the
MITRE ATT&CKยฎ framework. Security teams can use
Atomic Red Team to quickly, portably, and reproducibly test their environments.

Get started

You can execute atomic tests directly from the command line, no installation
required. See the Getting started
page of our wiki.

For a more robust testing experience, consider using an execution framework like
Invoke-Atomic.

Learn more

The Atomic Red Team documentation is available as a wiki.

For information about the philosophy and development of Atomic Red Team, visit
our website at https://atomicredteam.io.

To stay up to date on all things Atomic Red Team, sign up for the Atomic Newsletter: https://redcanary.com/atomic-newsletter/

Contribute to Atomic Red Team

Atomic Red Team is open source and community developed. If you're interested in
becoming a contributor, check out these resources:

  • Join our Slack workspace and get involved
    with the community. Don't forget to review the code of conduct
    before you join.
  • Report bugs and request new features by submitting an issue.
  • Read our contribution guide
    for more information about contributing directly to this repository.
  • Check the license for information regarding the distribution
    and modification of Atomic Red Team.
  • Contribute to linux atomics quickly from GitHub Codespaces. For more details, click here

2. In-Tree Documentation Chapters (redcanaryco/atomic-red-team)

Atomic Red Team

Atomic Red Teamโ„ข is a library of tests mapped to the
MITRE ATT&CKยฎ framework. Security teams can use
Atomic Red Team to quickly, portably, and reproducibly test their environments.

Get started

You can execute atomic tests directly from the command line, no installation
required. See the Getting started
page of our wiki.

For a more robust testing experience, consider using an execution framework like
Invoke-Atomic.

Learn more

The Atomic Red Team documentation is available as a wiki.

For information about the philosophy and development of Atomic Red Team, visit
our website at https://atomicredteam.io.

To stay up to date on all things Atomic Red Team, sign up for the Atomic Newsletter: https://redcanary.com/atomic-newsletter/

Contribute to Atomic Red Team

Atomic Red Team is open source and community developed. If you're interested in
becoming a contributor, check out these resources:

  • Join our Slack workspace and get involved
    with the community. Don't forget to review the code of conduct
    before you join.
  • Report bugs and request new features by submitting an issue.
  • Read our contribution guide
    for more information about contributing directly to this repository.
  • Check the license for information regarding the distribution
    and modification of Atomic Red Team.
  • Contribute to linux atomics quickly from GitHub Codespaces. For more details, click here

--- METRICS ---