mitre-attack / evals_caldera

A CALDERA plugin for ATT&CK Evaluations Round 1

⚠️ This repository is no longer actively maintained. Try out the CALDERA Emu plugin instead.

CALDERA plugin: Eval

Overview

A plugin supplying CALDERA with the TTPs used within the ATT&CK Evaluations Round 1 (APT3). For more information see https://attackevals.mitre.org/about-attack-evaluations.html

1. Plugin Installation
2. Lab Setup
3. Execution

Installation

Clone the Eval plugin into the caldera/plugin directory

git clone https://github.com/mitre-attack/evals_caldera.git

Add Eval plugin to CALDERA config conf/local.yml

plugins:
  - evals_caldera

Fill out facts in data/facts/ specific to your setup.

Environment Setup

Full Round 1 Environment

Minimum requirements:

• Initial host exists within a windows domain
• Remote shared drive is mounted

Execution

Please read the full documentation for this plugin.