redcanaryco/chain-reactor

Stars
288
Rank 143,818 (Top 3 %)
Language
C
License
MIT License
Created almost 5 years ago
Updated 5 months ago

redcanaryco/chain-reactor

redcanaryco

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

Chain Reactor

Chain Reactor is an open-source tool for testing detection and response coverage on Linux machines. The tool generates executables that simulate sequences of actions like process creation and network connection. Chain Reactor assumes no prior engineering experience; the tool consumes JSON, so customizing its behavior is as simple as editing a file.

Get started

For installation and usage instructions, see the Getting started page of the wiki.

Learn more

The Chain Reactor documentation is available as a wiki.

For information about the philosophy and development of the atomic family of projects, visit our website at https://atomicredteam.io.

Check the license for information regarding the distribution and modification of Chain Reactor.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

mac-monitor

Red Canary Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research. Beginning with Endpoint Security (ES), it collects and enriches system events, displaying them graphically, with an expansive feature set designed to reduce noise.

invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

AtomicTestHarnesses

Public Repo for Atomic Test Harness

surveyor

A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.

oxidebpf

A Rust library for managing eBPF programs.

redcanary-response-utils

Tools to automate and/or expedite response.

redcanary-ebpf-sensor

Red Canary's eBPF Sensor

ebpfmon

wwhf

Exercises for C# Workshop at Wild West Hackin' Fest 2018 & 2019.

exploit-primitive-playground

vscode-attack

Visual Studio Code extension for MITRE ATT&CK

public-research

Public repository for Red Canary Research

ansible-atomic-red-team

This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam

cbapi2

Red Canary Carbon Black API

cb-response-smb1-utility

A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.

cbconnect-2019

openapi

Public API clients for connecting to the Red Canary APIs

rtlshtree

helm-charts

Red Canary's Public Helm Chart Repository