AI-powered offensive security agent with 7,300+ actionable security skills. Autonomous pentesting powered by MITRE ATT&CK (2,000+ Atomic tests), CIS Benchmarks (1,500+ controls), OWASP, NIST. Lazy-loading, zero context pollution. Your AI red team.

Implant drop-in for EDR testing

Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques

BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detections via yaml files

A tool to run and validate telemetry for Atomic Red Team tests

A library of post-exploitation MacOS scripts based on threat emulation, LOObins, CTI, and MITRE ATT&CK.

Slides, notes and more related to Atomics on a Friday

A shrimple guide to deploying the Elastic Stack to create your own local SIEM setup for shrimple Windows event log shipping and analysis; for simulations and more, plus mock DFIR simulations using Atomic Red Team!

This project sets up an Active Directory environment and configures Splunk to ingest events from a Windows Server and a target machine. We perform a brute force attack using Kali Linux to observe telemetry and use Atomic Red Team for additional testing. Goals: enhance IT administration skills, event monitoring, and threat detection.

The lab involves setting up a virtualized environment with Oracle VM VirtualBox, creating Windows 10, Kali Linux, Windows Server, and Ubuntu Server VMs. Tools like Splunk, Sysmon, and Crowbar are used for security testing. Participants configure networks, join Windows to Active Directory, and practice PowerShell scripting.

Simulated SOC environment using Splunk, Sysmon & Atomic Red Team

A Kathara Framework Cyber Lab, for attack and defense emulation

Project for Project 1 course of SoICT - HUST

Hands-on SOC lab showcasing AD attack detection and endpoint hardening using Atomic Red Team, Wazuh, and CIS compliance frameworks.

GitHub Action for local execution of Atomic Red Team tests using Invoke-Atomic

Create a complete Active Directory lab environment, configure Windows servers, and test security using tools like Kali Linux, Splunk, and Atomic Red Team.

Atomic Red Team detections using Auditd, Fluentbit, Loki and Grafana.

Home Lab for red/blue team practice.

Adversary emulation scenarios using Atomic Red Team — credential dumping, lateral movement, persistence