create-attack-technique

To create cloud attack techniques, you define the attack logic and infrastructure using Go and Terraform. This Skill guides you through writing detonation and revert logic while ensuring your techniques are granular, plausible, and state-independent for environments like AWS, Azure, and GCP.

Simulating an AWS privilege escalation attack involves defining the specific technique, writing the detonation logic in Go, and provisioning the necessary cloud resources with Terraform. This Skill streamlines this process and helps generate the required documentation for the simulation.

Yes, this attack simulation approach supports Azure and Kubernetes environments, including EKS and Entra ID. It allows you to define and implement state-independent attack techniques across multiple cloud platforms using a consistent Go and Terraform workflow.

You review existing cloud attack techniques by using a provided checklist to verify correctness and consistency in pull requests. This ensures the attack emulation logic adheres to the required principles of being granular, plausible, and state-independent across your cloud environments.

The best way to document new cloud attack techniques is to automate the creation process after implementing the Go and Terraform logic. This Skill generates the necessary documentation automatically, ensuring your newly defined attack simulations are properly recorded and consistent.

You should ensure your attack emulation logic is state-independent during the creation and review of any new technique. This principle guarantees that your cloud attack simulations remain granular and plausible without relying on pre-existing environmental conditions.