Watch Brian Donhoue’s talk “What is ATT&CK Coverage Anyway? Breadth and Depth Analysis with Atomic Red Team” from this year’s ATT&CKcon.

Red Canary's Adam Mashinchi and Brian Donohue joined the Risky Business podcast to discuss Atomic Red Team and adversary emulation in general.

User tr4cefl0w added a new atomic test for T1547.003: Boot or Logon Autostart Execution: Time Providers

Researcher Michael Koczwara demonstrates how the Atomic Red Team tests for TA006: Credential Access and T1033.001: Credential Dumping: LSASS Memory can help shore up your detection coverage for the Conti ransomware group.