Custom Atomics Deployment

Create, deploy, and execute custom Atomic Red Team YAML tests.

471|74|Updated Jan 13, 2026
One-click install
npx skills add https://github.com/MHaggis/Security-Detections-MCP --skill custom-atomics-deployment
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Custom Atomics Deployment
Source: https://github.com/MHaggis/Security-Detections-MCP/tree/main/.claude/skills/custom-atomics-deployment
Command: npx skills add https://github.com/MHaggis/Security-Detections-MCP --skill custom-atomics-deployment

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables the creation, deployment, and execution of custom security tests (Atomic Red Team T9999.XXX series) when standard tests are insufficient, ensuring comprehensive detection validation.

Core Features & Use Cases

  • Custom Atomic Authoring: Define new security tests in YAML format, mapping to ATT&CK techniques.
  • Flexible Deployment: Deploy custom atomics using Ansible, SCP/WinRM, or Attack Range.
  • Remote Execution: Execute custom atomics on target systems via Ansible or direct remote commands.
  • Use Case: A security team needs to test a detection for a novel phishing technique not covered by existing Atomic Red Team tests. They create a custom atomic, deploy it to their test environment, and execute it to validate the detection.

Quick Start

Deploy the custom atomic test T9999.001 to the target IP 192.168.1.100 using Ansible.

Frequently Asked Questions about Custom Atomics Deployment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create custom Atomic Red Team tests for security detection validation?

To create custom Atomic Red Team tests, you author new security tests in YAML format and map them to ATT&CK techniques. This allows you to validate detections for novel threats when standard tests are insufficient for your security testing needs.

Can I deploy custom atomics to Windows and Linux endpoints using Ansible?

Yes, you can deploy custom atomics to Windows and Linux endpoints using Ansible, SCP, or WinRM. This supports flexible deployment of custom security tests across target systems via remote execution.

What environment variables need to be configured to run custom security tests remotely?

Running custom security tests remotely requires configuring environment variables for paths and target IP addresses. This setup ensures your custom atomics can successfully execute on the designated Windows and Linux endpoints.

When should I use custom security tests instead of standard Atomic Red Team tests?

You should use custom security tests when standard Atomic Red Team tests are insufficient for your needs. If you need to test a detection for a novel technique not covered by existing tests, authoring custom atomics ensures comprehensive threat emulation.

Does this custom atomic deployment approach work with Attack Range environments?

Yes, custom atomic deployment works with Attack Range environments alongside Ansible, SCP, and WinRM. You can deploy and execute custom security tests on target systems within your configured Attack Range setup.