ttp-bench
ttp-bench copied to clipboard
Adversary emulation for EDR/SIEM testing (macOS/Linux)
Results
2
ttp-bench issues
Sort by
recently updated
recently updated
newest added
I'm concerned that traitor could leave a modified passwd file in place if the test times out. Unfortunately, I don't have a vulnerable machine for testing at this time. Because...
As some compromises hysterically end up mining crypto-coins, we should simulate appropriately: https://attack.mitre.org/techniques/T1496/ Perhaps we can rig something up to use XMrig to mine Monero for 15 seconds?