red-team-tactics

Map red-team tactics to MITRE ATT&CK for adversary simulations.

Updated Aug 22, 2025
One-click install
npx skills add https://github.com/AnthonyCongHieu/voice_tool --skill red-team-tactics-anthonyconghieu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: red-team-tactics
Source: https://github.com/AnthonyCongHieu/voice_tool/tree/main/voice_tools_v1/.agent/skills/red-team-tactics
Command: npx skills add https://github.com/AnthonyCongHieu/voice_tool --skill red-team-tactics-anthonyconghieu

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Red team practitioners need a structured, MITRE-aligned framework to design, execute, and evaluate adversary simulations while maintaining safety and scope.

Core Features & Use Cases

  • MITRE ATT&CK phase mapping for planning exercises
  • Guidance on reconnaissance, access, evasion, lateral movement, and reporting
  • Ethics and boundaries to ensure controlled, safe assessments

Quick Start

Begin by reviewing the MITRE ATT&CK phases outlined above to map your environment and plan a controlled red-team exercise.

Frequently Asked Questions about red-team-tactics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map red team tactics to MITRE ATT&CK phases for adversary simulations?

You plan red team engagements by mapping exercises to MITRE ATT&CK phases, specifying structured guidance for reconnaissance, initial access, privilege escalation, defense evasion, lateral movement, and reporting use cases.

What ethical boundaries should I follow during enterprise red team assessments?

Ethical boundaries for red team assessments ensure controlled, safe evaluations by defining strict scope, maintaining safety protocols, and documenting actions to prevent unintended disruption during adversary simulations.

Can I use this framework to plan defense evasion and lateral movement exercises?

Yes, you can plan defense evasion and lateral movement exercises using structured guidance that maps these specific tactics to MITRE ATT&CK phases within controlled enterprise environments.

What is the best way to document and report red team engagement results?

The best way to document red team engagement results is by following structured reporting use cases aligned with MITRE ATT&CK, ensuring controlled assessments are evaluated and communicated effectively.

Does this approach provide threat modeling guidance for initial access and privilege escalation?

Yes, this approach provides threat modeling guidance for initial access and privilege escalation by mapping these specific attack lifecycle stages to the MITRE ATT&CK framework.