ttp-bench icon indicating copy to clipboard operation
ttp-bench copied to clipboard

Adversary emulation for EDR/SIEM testing (macOS/Linux)

Results 2 ttp-bench issues
Sort by recently updated
recently updated
newest added

I'm concerned that traitor could leave a modified passwd file in place if the test times out. Unfortunately, I don't have a vulnerable machine for testing at this time. Because...

As some compromises hysterically end up mining crypto-coins, we should simulate appropriately: https://attack.mitre.org/techniques/T1496/ Perhaps we can rig something up to use XMrig to mine Monero for 15 seconds?