From 834218efd3e1eb044f53b3147f80e5f8d428e21c Mon Sep 17 00:00:00 2001 From: za Date: Tue, 19 Nov 2024 19:29:37 +0700 Subject: [PATCH] Initial commit on comparison with halberd Issue https://github.com/DataDog/stratus-red-team/issues/584 --- docs/comparison.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/comparison.md b/docs/comparison.md index 20ff74ccf..436a79fb1 100644 --- a/docs/comparison.md +++ b/docs/comparison.md @@ -12,6 +12,12 @@ For instance, [AWS - Create Access Key and Secret Key](https://github.com/redcan However, the attack technique format of Atomic Red Team is [based on YAML](https://github.com/redcanaryco/atomic-red-team/blob/7576aff377781ba3546c0835e48bffc980b4cbc8/atomics/T1098.001/T1098.001.yaml#L169-L196), and it's therefore easier to add new TTPs, even if they are not in the core of Atomic Red Team. + +## [Halberd](https://github.com/vectra-ai-research/Halberd) by Vectra AI. + +> Halberd is a powerful, multi-cloud security testing tool. Born out of the need for a unified, easy-to-use tool, Halberd enables you to proactively assess your cloud defenses by executing a comprehensive array of attack techniques across Entra ID, M365, Azure, and AWS. With its intuitive web interface, you can simulate real-world attacks, generate valuable telemetry, and validate your security controls with ease & speed. + + ## [Leonidas](https://github.com/FSecureLABS/leonidas) by F-Secure (Nick Jones) > Leonidas is a framework for executing attacker actions in the cloud. It provides a YAML-based format for defining cloud attacker tactics, techniques and procedures (TTPs) and their associated detection properties