skills.rest
camgrimsec
camgrimsecCOMMUNITY
Explore all skills by this author →
GitHub

adversary-simulation-agent

Simulate adversary attacks and generate kill-chain narratives from exploit-validation findings.

3|1|Updated Apr 13, 2026
Search Tags:#penetration testing#red team#adversary simulation#mitre att&ck#attack chain#exploit validation
One-click install
npx skills add https://github.com/camgrimsec/grimsec-suite --skill adversary-simulation-agent
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: adversary-simulation-agent
Source: https://github.com/camgrimsec/grimsec-suite/tree/main/agents/12-adversary-simulation-agent
Command: npx skills add https://github.com/camgrimsec/grimsec-suite --skill adversary-simulation-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It provides a safe, controlled environment to turn static vulnerability findings into proven attack narratives, allowing organizations to understand real‑world impact without risking production systems.

Core Features & Use Cases

  • Rules of Engagement: Generates a signed RoE to define scope and constraints.
  • Automated Reconnaissance: Leverages RedAmon to map the attack surface and enrich findings.
  • Controlled Exploitation: Executes exploits only against in‑scope targets with mandatory human approval.
  • Post‑Exploitation Assessment: Evaluates lateral movement, privilege escalation, and data access.
  • MITRE ATT&CK Mapping & Reporting: Produces a detailed kill‑chain report and ATT&CK heat map for executives.
  • Use Cases: Red‑team exercises, penetration‑test validation, compliance audits, and executive risk briefings.

Quick Start

Ask the adversary simulation skill to run a full simulation using your signed RoE file.

Frequently Asked Questions about adversary-simulation-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I turn penetration testing findings into attack chain narratives?▼

Adversary simulation transforms static vulnerability findings into proven kill-chain narratives using automated reconnaissance and controlled exploitation. This maps the real-world impact of exploits without risking production systems.

What do I need to run an adversary simulation and generate an executive report?▼

Running an adversary simulation requires a signed Rules of Engagement JSON file to define scope, the RedAmon tool for reconnaissance, and an optional Neo4j graph for attack surface mapping.

How does red team exploit validation work with MITRE ATT&CK mapping?▼

Red team exploit validation executes exploits against in-scope targets with mandatory human approval, then evaluates lateral movement and privilege escalation to produce a detailed MITRE ATT&CK heat map.

Can I use this adversary simulation for compliance audits and risk briefings?▼

Yes, adversary simulation supports compliance audits and executive risk briefings by providing a safe, controlled environment to validate exploit findings and generate comprehensive kill-chain reports.

What are the limitations of running controlled exploitation during attack simulations?▼

Controlled exploitation is limited by a signed Rules of Engagement that strictly defines scope and constraints, ensuring exploits execute only against approved targets with mandatory human approval.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

threat-profile

Builds threat actor profiles for adversary emulation and outputs JSON for conops.

Community
Intermediate
ensingm2ensingm2
12

threat-modeler

Apply STRIDE, MITRE ATT&CK, and Kill Chain frameworks to identify and model security threats.

Community
Advanced
Steffen025Steffen025
186

WebAssessment

Integrate reconnaissance, threat modeling, and vulnerability testing for web applications.

Community
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate