diff --git a/docs/atomicredteam.md b/docs/atomicredteam.md new file mode 100644 index 00000000..583a9780 --- /dev/null +++ b/docs/atomicredteam.md @@ -0,0 +1,82 @@ +--- +layout: default +--- + +# Atomic Red Team + +Atomic Red Team is an open-source library of tests that security teams can +use to simulate adversarial activity in their environments. + +## Fast + +Atomic tests run in five minutes or less and require minimal setup. Spend less +time configuring and more time testing! + +## Focused + +Security teams don't want to operate with a "hopes and prayers" attidude towards +detection. Atomic tests are mapped to the MITRE ATT&CK matrix, so you always +know which techniques you do and don't detect. + +## Community-driven + +Atomic Red Team is open source and community developed. By working together, we +can develop a fuller picture of the security landscape. + +## Download Atomic Red Team + +Ready to start testing? Download the library from GitHub [here](https://github.com/redcanaryco/atomic-red-team), +or check out the [Getting started](https://github.com/redcanaryco/atomic-red-team/wiki/Getting-Started) +page of the Atomic Red Team documentation. + +--- + +# Roll the dice + +Not sure where to start? Roll the dice to select a random Atomic Test from the catalog. + +
+ Roll the dice! +
+ + + + + + + + + + + + + + +
Tactic +

+
Technique +

+
Atomic Test +

+
+
+

+ Platforms: + +

+
+
+

Input Arguments:

+

+      
+
+

+

+      
+

Learn more at

+
+ +Thanks to [Tim Malcomvetter](https://medium.com/@malcomvetter/red-team-use-of-mitre-att-ck-f9ceac6b3be2) +and [Tim McGuffin](https://www.twitter.com/NotMedic) for their idea! + + diff --git a/docs/atomictestharnesses.md b/docs/atomictestharnesses.md new file mode 100644 index 00000000..dc09dd83 --- /dev/null +++ b/docs/atomictestharnesses.md @@ -0,0 +1,24 @@ +--- +layout: default +--- + +# AtomicTestHarnesses + +AtomicTestHarnesses is a PowerShell module that simulates multiple variations +on a single attack technique. + +## Complexity simplified + +The exact details of a technique can vary from attack to attack. +With AtomicTestHarnesses, you can test for multiple versions of an attack at +once. + +## Validated testing + +AtomicTestHarnesses includes a suite of Pester tests to help you validate your +telemetry, so you can stop worrying and get back to testing. + +## Download AtomicTestHarnesses + +Visit the [AtomicTestHarnesses GitHub repository](https://github.com/redcanaryco/atomictestharnesses) +for installation instructions, usage guides, and more. diff --git a/docs/chainreactor.md b/docs/chainreactor.md new file mode 100644 index 00000000..712e95ad --- /dev/null +++ b/docs/chainreactor.md @@ -0,0 +1,26 @@ +--- +layout: default +--- + +# Chain Reactor + +Chain Reactor is a tool for testing detection and response coverage on Linux +machines. + +## Portable testing for Linux + +Chain Reactor creates executables that can perform sequences of +actions like process creation and network connection. Compile your tests once +and run them on as many machines as you need! + +## Customizable test files + +Customizing your tests is as easy as editing a JSON file. Specify a list of +behaviors and let Chain Reactor do the heavy lifting. + +## Download Chain Reactor + +You can download Chain Reactor directly from the [GitHub repository](https://github.com/redcanaryco/chain-reactor). +Want to learn more about configuring and executing tests? Read the +[Getting started](https://github.com/redcanaryco/chain-reactor/wiki/Getting-started.md) +page of the wiki. diff --git a/docs/invokeatomic.md b/docs/invokeatomic.md new file mode 100644 index 00000000..0715a684 --- /dev/null +++ b/docs/invokeatomic.md @@ -0,0 +1,27 @@ +--- +layout: default +--- + +# Invoke-Atomic + +Invoke-Atomic is a PowerShell-based framework for developing and executing +Atomic Red Team tests. + +## Cross-platform support + +Invoke-Atomic runs anywhere PowerShell Core runs. Test on Windows, macOS, and +Linux with minimal configuration! + +## Testing at a distance + +With Invoke-Atomic, you can execute tests remotely across a network. + +## New tests made easily + +Invoke-Atomic's atomic GUI makes developing new tests as easy as filling out a +form. + +## Download Invoke-Atomic + +Visit the [GitHub repository for Invoke-Atomic](https://github.com/redcanaryco/invoke-atomicredteam) +for installation and usage instructions.