← detection engineer

Adversary Emulation — Atomic Red Team, Caldera, Stratus

intermediate 4h

Run Atomic Red Team tests, Caldera operations, and Stratus Red Team scenarios; interpret which detections fired and why others did not.

After this module you will

  • › Explain why emulation is the missing half of detection engineering
  • › Execute an Atomic Red Team test and read its output
  • › Structure a Caldera operation with abilities, adversaries, and planners
  • › Run a Stratus Red Team cloud attack scenario
  • › Build a coverage matrix showing technique × detection outcome

Lessons

1 Why Emulation — The Missing Half of Detection Engineering
20 min
2 Atomic Red Team — Individual Technique Tests
25 min
3 CALDERA — Orchestrated Multi-Stage Operations
25 min
4 Stratus Red Team — Cloud Attack Emulation
20 min
5 Coverage Matrix — Turning Emulation Results into a Detection Gap Report
25 min

Module Quiz

Test your knowledge before moving on.

Take Quiz →