What is Invoke-AtomicRedTeam?
Invoke-AtomicRedTeam is a PowerShell module that allows you to test your security controls and defenses against a wide range of attack techniques.
Before you get started
- Executing atomic tests may leave your system in an undesirable state. You are responsible for understanding what a test does before executing.
- Ensure you have permission to test before you begin.
- It is recommended to set up a test machine for atomic test execution that is similar to the build in your environment. Be sure you have your collection/EDR solution in place, and that the endpoint is checking in and active.
Invoke-AtomicRedTeam installation and usage instructions can be found on the docs on the top menu.
There are a series of short instructional videos on this YouTube channel.
You can also find an in-depth 1 hour webcast here, with hands-on lab documents here.
Also a good general overview of the value of attack emulation is found here