Custom Atomics Deployment

What problem does it solve?

This Skill enables the creation, deployment, and execution of custom security tests (Atomic Red Team T9999.XXX series) when standard tests are insufficient, ensuring comprehensive detection validation.

Core Features & Use Cases

• Custom Atomic Authoring: Define new security tests in YAML format, mapping to ATT&CK techniques.
• Flexible Deployment: Deploy custom atomics using Ansible, SCP/WinRM, or Attack Range.
• Remote Execution: Execute custom atomics on target systems via Ansible or direct remote commands.
• Use Case: A security team needs to test a detection for a novel phishing technique not covered by existing Atomic Red Team tests. They create a custom atomic, deploy it to their test environment, and execute it to validate the detection.

Quick Start

Deploy the custom atomic test T9999.001 to the target IP 192.168.1.100 using Ansible.