/evals_caldera

A CALDERA plugin for ATT&CK Evaluations Round 1

Primary LanguagePowerShellApache License 2.0Apache-2.0

⚠️ This repository is no longer actively maintained. Try out the CALDERA Emu plugin instead.

CALDERA plugin: Eval

Overview

A plugin supplying CALDERA with the TTPs used within the ATT&CK Evaluations Round 1 (APT3). For more information see https://attackevals.mitre.org/about-attack-evaluations.html

  1. Plugin Installation
  2. Lab Setup
  3. Execution

Installation

Clone the Eval plugin into the caldera/plugin directory

git clone https://github.com/mitre-attack/evals_caldera.git

Add Eval plugin to CALDERA config conf/local.yml

plugins:
  - evals_caldera

Fill out facts in data/facts/ specific to your setup.

Environment Setup

Full Round 1 Environment

Minimum requirements:

  • Initial host exists within a windows domain
  • Remote shared drive is mounted

Execution

Please read the full documentation for this plugin.