Stratus Red Team is "Atomic Red Team™" for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner.
Read the announcement blog posts:
- https://www.datadoghq.com/blog/cyber-attack-simulation-with-stratus-red-team/
- https://blog.christophetd.fr/introducing-stratus-red-team-an-adversary-emulation-tool-for-the-cloud/
Stratus Red Team is a self-contained Go binary.
See the documentation at stratus-red-team.cloud:
-
Installing Stratus Red Team - Homebrew formula, Docker image and pre-built binaries available
-
Available Attack Techniques, mapped to MITRE ATT&CK
Direct install (requires Go 1.18+):
go install -v github.com/datadog/stratus-red-team/v2/cmd/stratus@latest
- Homebrew:
brew tap datadog/stratus-red-team https://github.com/DataDog/stratus-red-team
brew install datadog/stratus-red-team/stratus-red-team
-
Linux / Windows / Mac OS: Download one of the pre-built binaries.
-
Docker:
IMAGE="ghcr.io/datadog/stratus-red-team"
alias stratus="docker run --rm -v $HOME/.stratus-red-team/:/root/.stratus-red-team/ -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e AWS_DEFAULT_REGION $IMAGE"The following section lists posts and projects from the community leveraging Stratus Red Team.
Open-source projects:
Videos:
- Reproducing common attacks in the cloud with Stratus Red Team
- Stratus Red Team: AWS EC2 Instance Credential Theft | Threat SnapShot
Blog posts:
- AWS threat emulation and detection validation with Stratus Red Team and Datadog Cloud SIEM
- Adversary emulation on AWS with Stratus Red Team and Wazuh
- Sky’s the Limit: Stratus Red Team for Azure
- Detecting realistic AWS cloud-attacks using Azure Sentinel
- A Data Driven Comparison of Open Source Adversary Emulation Tools
- Making Security Relevant in the Cloud
- Detonating attacks with Datadog Stratus Red Team
- AWS CloudTrail cheatsheet
- Adversary emulation on GCP with Stratus Red Team and Wazuh
- Automated First-Response in AWS using Sigma and Athena
Talks:
- Purple Teaming & Adversary Emulation in the Cloud with Stratus Red Team, DEF CON Cloud Village 2022 (recorded after the event as the talks were not recorded)
- Threat-Driven Development with Stratus Red Team by Ryan Marcotte Cobb
- Cloudy With a Chance of Purple Rain: Leveraging Stratus Red Team - BSides Portland 2022
Papers:
See Examples and Programmatic Usage.
make
./bin/stratus --helpgo run cmd/stratus/*.go listmake testFor local usage:
pip install mkdocs-material mkdocs-awesome-pages-plugin
make docs
mkdocs serve
Maintainer: @christophetd
Similar projects (see how Stratus Red Team compares):
- Atomic Red Team by Red Canary
- Leonidas by F-Secure
- pacu by Rhino Security Labs
- Amazon GuardDuty Tester
- CloudGoat by Rhino Security Labs
Inspiration and relevant resources:
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "github-actions[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent