A walkthrough of macOS ATT&CK techniques using LOAS, a set of ATT&CK-mapped atomic tests built for Apple platforms. Covers AppleScript, JXA, Remote Apple Events, TCC, and how to use these techniques for detection validation.
Hacking the Orchard:Offensive Security with AppleScript and JXA
A walkthrough of macOS ATT&CK techniques using LOAS, a set of ATT&CK-mapped atomic tests built for Apple platforms. Covers AppleScript, JXA, Remote Apple Events, TCC, and how to use these techniques for detection validation.
Catch Me If You Can:Detector-Resistant Evasion via Semantics-Preserving Command Re-Realization
A research paper exploring techniques for evading detections through semantics-preserving command re-realization, without altering the underlying behavior of the commands.
Bridging the Gap:Enhancing Detection Coverage with Atomic Red Team, Sigma, and MITRE ATT&CK
A practical approach to continuous detection validation using Atomic Red Team, Sigma rules, and MITRE ATT&CK mapping via GitHub Actions and Docker. Learn how to automate detection coverage assessment and visualize security gaps using ATT&CK Navigator.
Whether you want to advance your career or are new to information security, Atomic Red Team can help. Here are a slew of tips from the atomic community.