atomic-red-team 开源项目推荐（131 个）

zimnyaa /noWatch

Implant drop-in for EDR testing

MHaggis /NEBULA

Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques

DamonMohammadbagher /BEV4

BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detections via yaml files

secureworks /atomic-harness

A tool to run and validate telemetry for Atomic Red Team tests

darmado /attack-macOS

A library of post-exploitation MacOS scripts based on threat emulation, LOObins, CTI, and MITRE ATT&CK.

uruc /Active-Directory-Lab

This project sets up an Active Directory environment and configures Splunk to ingest events from a Windows Server and a target machine. We perform a brute force attack using Kali Linux to observe telemetry and use Atomic Red Team for additional testing. Goals: enhance IT administration skills, event monitoring, and threat detection.

VTFoundation /art-auto-testing

该项目在 GitHub 上没有填写描述

Atomics-on-A-Friday /Episode-Notes

Slides, notes and more related to Atomics on a Friday

nubbsterr /Elastic-ART

A shrimple guide to deploying the Elastic Stack to create your own local SIEM setup for shrimple Windows event log shipping and analysis; for simulations and more, plus mock DFIR simulations using Atomic Red Team!

avulman /active-directory-project

The lab involves setting up a virtualized environment with Oracle VM VirtualBox, creating Windows 10, Kali Linux, Windows Server, and Ubuntu Server VMs. Tools like Splunk, Sysmon, and Crowbar are used for security testing. Participants configure networks, join Windows to Active Directory, and practice PowerShell scripting.

Shashank0409 /splunk-threat-detection-lab

Simulated SOC environment using Splunk, Sysmon & Atomic Red Team

scythe-io /sigma-regression-testing

Detection engineering pipeline: 140 Sigma rules for Windows, Linux, and M365/Azure with automated CI/CD validation, Splunk conversion, and Atomic Red Team regression testing. MITRE ATT&CK mapped.

g4br-i /KathaRange

A Kathara Framework Cyber Lab, for attack and defense emulation

scthornton /purpleforge

Evidence-driven purple team pipeline — extracts ATT&CK techniques from threat reports, executes adversary emulations (Caldera + Atomic Red Team), validates detections (LimaCharlie), and produces coverage reports with per-technique proof chains

phannhat17 /Atomic-RedTeam-MITRE-Coverage

Project for Project 1 course of SoICT - HUST

iamahmedsalam /home-soc-lab

Home SOC Lab v2.0 — Wazuh SIEM with 10 custom MITRE ATT&CK detection rules, Atomic Red Team simulation (8/10 detected), and 3 professional incident reports.

RafuCyberSec /Active-Directory-Attack-Simulation-and-Hardening-Lab

Hands-on SOC lab showcasing AD attack detection and endpoint hardening using Atomic Red Team, Wazuh, and CIS compliance frameworks.

smolse /invoke-atomic-action

GitHub Action for local execution of Atomic Red Team tests using Invoke-Atomic

V1p3rOne /Active-Directory

Create a complete Active Directory lab environment, configure Windows servers, and test security using tools like Kali Linux, Splunk, and Atomic Red Team.

enak223 /agentic-ai-for-security

AI-powered SOC automation lab — Wazuh SIEM, n8n AI Agent, Claude API, and full attack chain simulation for autonomous threat detection and triage.