Atomic Red Team Logo.png
 
 
Atomic Newsletter
 
 
Welcome to the November edition of the Atomic Newsletter, a monthly email in which we will summarize the updates and news about Atomic Red Team™ and its related projects such as Atomic Friday, MITRE ATT&CK®, Invoke-AtomicRedTeam, AtomicTestHarnesses, and more!
 
 
 
 
 
Test Showcase
Highlighting new & novel atomics
 
This month the Atomic Red Team maintainers wanted to showcase a couple of noteworthy new atomic tests that caught their eye!
 
 
 
 
T1027:
Generic Command-Line Obfuscation
 
First time contributor wietze created an amazing test that includes a bypass for (default config) Windows Defender alerting.

Utilizing 'certutil.exe' and an obfuscated example command from another atomic test, the test downloads a file from the internet and drops it on an endpoint.


 
 
PR #74:
Improving Download Speeds
 
Although it's not a new test, Invoke-AtomicRedTeam received a significant update this month from regular contributor Clément Notin!

It turns out that the implementation of a progress bar significantly increased the wait time of a download. Removing the progress bar causes a dramatic speed improvement (120 seconds to 3.5 seconds on Windows)!
 
 
 
 
 
 
Videos for your queue
Automating MITRE ATT&CK testing with Atomic Red Team & LimaCharlie
 
DevOps provider LimaCharlie has incorporated Atomic Red Team tests into their service. Watch this demo from founder Maxime Lamothe-Brassard to see the integration in action. 
 
 
 
Atomic Red Team Logo.png
Confidently measuring ATT&CK technique coverage by asking better questions
 
Atomic Red Team maintainer Matt Graeber recently gave a demo of AtomicTestHarnesses at BSides Augusta. 
 
 
 
 
 
 
ATT&CK v10: Help us update and migrate the Atomic Red Team library 
 

art_tweet_202111.png

 
 
 
 
 
 
Atomic Red Team community updates
 
 
 
 
 

Atomic Red Team cannot continue to be the amazing library it is without the time, effort, and contributions from the community and the project maintainers. We wanted to showcase some of the individuals who have taken the time to contribute changes and additions to Atomic Red Team!
 
 
New & top contributors in October
 
 
Top contributors:
  • devapriya16
  • MHaggis
  • vince-nayal




Huge thanks to everyone who contributed to Atomic Red Team, and a special shout out to all of the first-time contributors:
  • Rimsha3108
  • Zorn186802
  • wietze
  • forensictdev
  • JoustingZebra
  • devapriya16
  • vince-nayal

 
 
 
 
 
We are here to help! 
Atomic Red Team maintainers
 
Meet our amazing team of maintainers, who create new tests, manage pull requests, mentor new contributors, and do so much more.
 
 
 
 
Bhavin Patel
 
Slack: Bhavin Patel
GitHub:  patel-bhavin

 
Carl Petty
 
Carl Petty
 
Slack: Carl Petty
GitHub: rc-grey


 
Carrie Roberts
 
Carrie Roberts
 
Slack: OrOneEqualsOne
GitHub:  clr2of8


 
 
 
Jose Hernandez
 
Jose Hernandez
 
Slack: Jose Hernandez
GitHub:  d1vious

 
Matt Graeber
 
Matt Graeber
 
Slack: mattifestation
GitHub:   mattifestation

 
Mike Haag
 
Mike Haag
 
Slack: Mike Haag
GitHub: MHaggis

 
 
 
 
Featured blog
 
Our friends at Datto wrote this nice breakdown of how they use Atomic Red Team tests for adversary simulation. 
 
 
Hands-on learning
 
Watch a live training brought to you by Black Hills Information Security with Carrie and Darin Roberts.

 
 
Join us!
 
Atomic Red Team depends on community contributions to increase technique coverage across platforms.
 
 
 
 
 
 
Be a part of the Atomic community

Atomic Red Team is developed by a community of thousands of computer security advocates, practitioners, and enthusiasts. Come say hi on the Atomic Red Team Slack!
 
 
 
 
 
 
 

©2024 Red Canary All rights reserved.
1601 19th Street, Suite 900, Denver, CO 80202
https://redcanary.com | Unsubscribe

You received this email as a promotion of Red Canary. Click to adjust your preferences.