Skip to content

README.md

Latest commit

 

History

History
38 lines (27 loc) · 977 Bytes

README.md

File metadata and controls

38 lines (27 loc) · 977 Bytes

CALDERA plugin: Eval

Overview

A plugin supplying CALDERA with the TTPs used within the ATT&CK Evaluations Round 1 (APT3). For more information see https://attackevals.mitre.org/about-attack-evaluations.html

  1. Plugin Installation
  2. Lab Setup
  3. Execution

Installation

Clone the Eval plugin into the caldera/plugin directory

git clone https://github.com/mitre-attack/evals_caldera.git

Add Eval plugin to CALDERA config conf/default.yml

plugins:
  - evals_caldera

Fill out facts in data/sources/ specific to your setup.

Environment Setup

Full Round 1 Environment

Minimum requirements:

  • Initial host exists within a windows domain
  • Remote shared drive is mounted

Execution

Please read the full documentation for this plugin.

Contributors

Cisco Talos - Ported evals_caldera to Caldera 2.6.6