Implements adversary simulation principles and security audit workflows based on the MITRE ATT&CK framework.
This skill equips Claude with specialized knowledge to conduct ethical red-teaming simulations and security assessments. It provides structured guidance through the entire attack lifecycle—from reconnaissance and initial access to lateral movement and exfiltration—while emphasizing defense evasion and reporting. By adhering to MITRE ATT&CK principles, it helps developers and security professionals identify vulnerabilities, document detection gaps, and improve overall system resilience through rigorous, methodology-driven testing.
주요 기능
01Adversary simulation based on the complete MITRE ATT&CK lifecycle
02Privilege escalation strategies for both Windows and Linux environments
030 GitHub stars
04Active Directory attack methodologies like Kerberoasting and DCSync
05Structured security reporting principles for documenting detection gaps
06Defense evasion techniques including LOLBins and obfuscation patterns
사용 사례
01Conducting internal security audits and authorized penetration testing simulations
02Mapping organizational vulnerabilities to standardized attack phases
03Drafting comprehensive security reports with actionable remediation steps
