Stats
Actions
Tags
Executes Atomic Red Team tests using atomic-operator Python framework for MITRE ATT&CK validation. Loads YAML definitions, runs attack simulations, verifies SIEM/EDR detection coverage for purple team exercises.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills-zh:performing-threat-emulation-with-atomic-red-teamThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
使用 atomic-operator 执行 Atomic Red Team 测试，针对 MITRE ATT&CK 技术验证检测覆盖率。
使用 atomic-operator 执行 Atomic Red Team 测试，针对 MITRE ATT&CK 技术验证检测覆盖率。
from atomic_operator import AtomicOperator
operator = AtomicOperator()
# 运行指定技术测试
operator.run(
technique="T1059.001", # PowerShell 执行
atomics_path="./atomic-red-team/atomics",
)
关键工作流程：
# 解析原子测试 YAML 定义
import yaml
with open("atomics/T1059.001/T1059.001.yaml") as f:
tests = yaml.safe_load(f)
for test in tests.get("atomic_tests", []):
print(f"测试：{test['name']}")
print(f" 支持平台：{test.get('supported_platforms', [])}")
npx claudepluginhub killvxk/cybersecurity-skills-zhExecutes Atomic Red Team tests for MITRE ATT&CK validation using atomic-operator Python framework. Runs attack simulations from YAML atomics to test SIEM/EDR detection in purple team exercises.
Executes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Use when testing SIEM detection rules, validating EDR coverage, or conducting purple team exercises.
Executes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Use when testing SIEM detection rules, validating EDR coverage, or conducting purple team exercises.