Welcome to the Atomic Playbook

The Atomic Playbook contains TTPs from the MITRE ATT&CK framework mapped to the tests in the Atomic Red Team. It serves as a single resource to know about the tests, it's execution, detection and defense techniques from MITRE Shield.

Note: Shield mapping to subtechniques is yet to be done.

The Atomic Playbook uses

• Atomic Red Team
• ATT&CK-Python-Client
• Jupyter Notebook
• Dotnet Interactive(To support Powershell in Jupyter)
• MITRE Shield

Requirements:

Checkout the following links to install the requirements

• https://github.com/redcanaryco/invoke-atomicredteam/wiki/Installing-Atomic-Red-Team
• https://github.com/hunters-forge/ATTACK-Python-Client
• https://github.com/dotnet/interactive/blob/master/docs/NotebooksLocalExperience.md