Atomic Red Team

Atomic Red Team is a library of simple, small tests that simulate specific adversary behaviors mapped to MITRE ATT&CK techniques. Each test is designed to be atomic, repeatable, and platform-agnostic, making it easy for security teams to validate their detection capabilities. The framework allows teams to test and improve SIEM rules, endpoint detection, and response workflows. Tests are available as scripts, YAML files, or modules that can be automated for large-scale assessments. Atomic Red Team is widely used for adversary emulation, security validation, and continuous improvement of defensive measures.