Atomic Red Team
Portable ATT&CK-aligned tests for telemetry and control validation.
MIT
Reviewed Oct 12, 2026
Reviewed project metadata and official links for red, blue, purple, and cross-team security work.
This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.
Portable ATT&CK-aligned tests for telemetry and control validation.
MIT
Reviewed Oct 12, 2026
Windows forensic artifact search and Sigma-backed threat hunting.
GPL-3.0
Reviewed Oct 12, 2026
ATT&CK data-source, detection-strategy, and maturity mapping.
GPL-3.0
Reviewed Oct 12, 2026
Runtime event generation for Falco rule and throughput validation.
Apache-2.0
Reviewed Oct 12, 2026
OpenSearch-based security analytics, logging, detections, and hunting.
Apache-2.0
Reviewed Oct 12, 2026
Detection-as-code regression testing and coverage reporting.
Detection Rule License 1.1
Reviewed Oct 12, 2026
Security monitoring distribution combining logging, detections, network visibility, and case workflows.
Elastic License v2 for Security Onion and bundled Elastic components; other components retain their licenses.
Reviewed Oct 12, 2026
Platform-neutral detection rule specification and reviewed rule corpus.
Detection Rule License 1.1 for rules; specification and logo are public domain.
Reviewed Oct 12, 2026
Curated attack telemetry for detection development and replay validation.
Apache-2.0
Reviewed Oct 12, 2026
Instrumented security lab orchestration and telemetry generation.
Apache-2.0
Reviewed Oct 12, 2026
IDS, IPS, and network security monitoring engine.
GPL-2.0 source; documentation has separate terms.
Reviewed Oct 12, 2026
Pattern-matching engine for malware analysis, hunting, and detection engineering.
BSD-3-Clause
Reviewed Oct 12, 2026