executing-red-team-exercise

What problem does it solve?

Plans and coordinates red-team exercises by mapping attacker techniques to actionable steps, enabling structured planning, execution tracking, and evidence collection.

Core Features & Use Cases

• ATT&CK-aligned planning: automatically map emulated actor techniques to planned activities.
• Automated operation plans: generate comprehensive red-team operation plans with objectives and timelines.
• Detection-gap reporting: produce reports that compare executed techniques against detections to guide improvements.
• Use Case: Emulate a real-world actor (e.g., FIN7) to test SOC detections across phishing, credential access, and lateral movement.

Quick Start

Run the agent with appropriate flags to generate a red-team operation plan and review the generated JSON report.