New atomic tests & platforms

In what was certainly the biggest update to Atomic Red Team since the adoption of MITRE ATT&CK sub-techniques in the summer of 2020, the maintainers introduced atomic tests for cloud and container techniques in June.

Head over to the Red Canary blog to learn how you can validate your detection coverage on remote infrastructure. Senior Information Security Specialist Brian Donohue highlights some of the architectural challenges posed by an increase in atomic tests that are run from disparate tooling—like PowerShell or Bash—and target a wide array of remote infrastructure platforms, such as AWS, Azure, and Google Cloud.

Read More

Testing with the 2021 Threat Detection Report

After a brief hiatus, Atomic Fridays are back, with a new home on YouTube! Watch Matt Graeber and Brian Donohue walk through how to run Atomic Red Team tests for some of the most prevalent ATT&CK techniques.

This instructional video covers:

• How you can take action on the intelligence published in Red Canary's 2021 Threat Detection Report
  
  
• How to validate detection controls using Atomic Red Team and Sysmon

Watch the video

Meet our amazing team of maintainers, who create new tests, manage pull requests, mentor new contributors, and do so much more.