Red Canary, a Zscaler company ORG

Small and highly portable detection tests based on MITRE's ATT&CK.

Atomic Red Team is a library of nearly 1,800 small command-line tests that simulate real attacker behaviors so security teams can verify their detection tools actually catch known attack techniques.

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

Public Repo for Atomic Test Harness

A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.

A Rust library for managing eBPF programs.

Tools to automate and/or expedite response.

Red Canary's eBPF Sensor

No description.

No description.

Exercises for C# Workshop at Wild West Hackin' Fest 2018 & 2019.

Visual Studio Code extension for MITRE ATT&CK

SecTor - Not-So-Secret Agents: Deploying AI to Optimize Security Operations

Public repository for Red Canary Research

This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam

Red Canary Carbon Black API

A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.

An easy tool to automatically optimize and maintain Dependabot configurations

Public API clients for connecting to the Red Canary APIs

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Subscribe to raw Carbon Black event feed and forward to another system, such as Splunk, etc.

No description.

Official Ruby Zendesk API Client

No description.

Carbon Black API - Python language bindings

Red Canary's Public Helm Chart Repository

No description.

Protocol Buffers - Google's data interchange format

Prometheus instrumentation library for Ruby applications

No description.

A Github action for publishing to the package registry on tag pushes

A CLI workflow for the administration of macOS applications distributed as binaries

The timescaledb gem. Pack of helpers to work with TimescaleDB extension in Ruby.