redcanaryco/atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

12,477

stars

3,643

commits

C

primary language

Aug 31, 2026

updated

mitre
mitre-attack

README

Atomic Red Team

GitHub Action Status Atomics GitHub Action Status

Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments.

Get started

You can execute atomic tests directly from the command line, no installation required. See the Getting started page of our wiki.

For a more robust testing experience, consider using an execution framework like Invoke-Atomic.

Learn more

The Atomic Red Team documentation is available as a wiki.

For information about the philosophy and development of Atomic Red Team, visit our website at https://atomicredteam.io.

To stay up to date on all things Atomic Red Team, sign up for the Atomic Newsletter: https://redcanary.com/atomic-newsletter/

Contribute to Atomic Red Team

Atomic Red Team is open source and community developed. If you're interested in becoming a contributor, check out these resources:

  • Join our Slack workspace and get involved with the community. Don't forget to review the code of conduct before you join.
  • Report bugs and request new features by submitting an issue.
  • Read our contribution guide for more information about contributing directly to this repository.
  • Check the license for information regarding the distribution and modification of Atomic Red Team.
  • Contribute to linux atomics quickly from GitHub Codespaces. For more details, click here

Open in GitHub Codespaces

Contributors

(top 30 of 397)

clr2of8

347 commits

MHaggis

202 commits

dependabot[bot]

174 commits

josehelps

173 commits

redcanaryco/atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

12,477

stars

3,643

commits

C

primary language

Aug 31, 2026

updated

mitre
mitre-attack

README

Atomic Red Team

GitHub Action Status Atomics GitHub Action Status

Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments.

Get started

You can execute atomic tests directly from the command line, no installation required. See the Getting started page of our wiki.

For a more robust testing experience, consider using an execution framework like Invoke-Atomic.

Learn more

The Atomic Red Team documentation is available as a wiki.

For information about the philosophy and development of Atomic Red Team, visit our website at https://atomicredteam.io.

To stay up to date on all things Atomic Red Team, sign up for the Atomic Newsletter: https://redcanary.com/atomic-newsletter/

Contribute to Atomic Red Team

Atomic Red Team is open source and community developed. If you're interested in becoming a contributor, check out these resources:

  • Join our Slack workspace and get involved with the community. Don't forget to review the code of conduct before you join.
  • Report bugs and request new features by submitting an issue.
  • Read our contribution guide for more information about contributing directly to this repository.
  • Check the license for information regarding the distribution and modification of Atomic Red Team.
  • Contribute to linux atomics quickly from GitHub Codespaces. For more details, click here

Open in GitHub Codespaces

Contributors

(top 30 of 397)

clr2of8

347 commits

MHaggis

202 commits

dependabot[bot]

174 commits

josehelps

173 commits

Languages

C

43.6%

PowerShell

12.2%

Go

10.5%

Java

7.2%

C#

6.3%

Ruby

4.5%

Python

3.5%

C++

3.3%

VBScript

3.1%

Swift

1.3%

Batchfile

1.2%