Remove execution frameworks from Atomic Red Team #1274
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Details:
Removal of execution frameworks from Atomic Red Team as previously announced. The substantive bits from the original announcement follow:
Some background . . .
Atomic Red Team was always intended to be a library of tests, provided in the context of MITRE ATT&CK techniques. Atomic Red Team is managed like a software product, particularly like an API, in the sense that the schema should:
be simple enough to understand, but extensible enough to accommodate unforeseen use cases
avoid breaking changes
And that’s it! Atomic Red Team should enable lots of use cases, from learning to copy-and-paste test execution to software products that integrate tests. Importantly, Atomic Red Team isn’t software.
What’s changing?
Because Atomic Red Team isn’t intended to be software, we’re moving some software out of the project! The immediate impact of this is that we’re moving execution frameworks out of the project and into their own open source project(s). We did this with Invoke-AtomicRedTeam earlier this year, and we’ll now do the same with the Ruby and Python frameworks that have been contributed in the past.
The most recent and final version of the execution-frameworks directory, which included Python and Ruby frameworks at the time of removal, can be found at https://github.com/redcanaryco/atomic-red-team/tree/c60b8a9def4f4e33325411c3bba6d11099e7e551/execution-frameworks.