Implant drop-in for EDR testing

BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detections via yaml files

A tool to run and validate telemetry for Atomic Red Team tests

Slides, notes and more related to Atomics on a Friday

This project sets up an Active Directory environment and configures Splunk to ingest events from a Windows Server and a target machine. We perform a brute force attack using Kali Linux to observe telemetry and use Atomic Red Team for additional testing. Goals: enhance IT administration skills, event monitoring, and threat detection.

A Kathara Framework Cyber Lab, for attack and defense emulation

Project for Project 1 course of SoICT - HUST

The lab involves setting up a virtualized environment with Oracle VM VirtualBox, creating Windows 10, Kali Linux, Windows Server, and Ubuntu Server VMs. Tools like Splunk, Sysmon, and Crowbar are used for security testing. Participants configure networks, join Windows to Active Directory, and practice PowerShell scripting.

A library of MacOS scripts based on threat emulation, community research, CTI, atomic-red-team, and MITRE ATT&CK.

A project showcasing attack technique emulation using MITRE ATT&CK and detection with Wazuh, Sysmon, and Atomic Red Team.

Helper web app for the Atomic Red Team project

Multiplatform scripts used to orchestrate the setup and execution of atomic red team.

Create a complete Active Directory lab environment, configure Windows servers, and test security using tools like Kali Linux, Splunk, and Atomic Red Team.