uber-common/metta

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1145 stars · 160 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Metta is an information security preparedness tool that runs adversarial simulations to test host-based and network detection instrumentation. It parses YAML action files, queues commands via Redis/Celery, and executes them sequentially on Vagrant/VirtualBox VMs matched by OS.

Use cases

• simulate adversarial attack techniques to test my host-based detection instrumentation
• run MITRE ATT&CK technique simulations against Windows and Linux VMs
• validate whether my EDR or SIEM detects common discovery and persistence commands
• build purple team exercises from YAML-defined action sequences
• test network-based detection and controls with simulated attack traffic
• queue and execute security test actions one at a time without interaction

When to choose

• you want to test host-based detection instrumentation against real adversarial commands
• you need MITRE ATT&CK-aligned simulation scenarios for purple team exercises
• you prefer declarative YAML action files that can be extended with your own scenarios
• you already use Vagrant/VirtualBox and want automated command execution across OS-specific VMs
• you want queued, sequential execution of security actions without manual interaction

When to avoid

• you need a modern, actively maintained adversary emulation framework - the latest release is from 2019
• you want a full C2 or agent-based red team platform rather than simple command execution
• you cannot run Vagrant/VirtualBox or manage the Redis/Celery infrastructure it depends on
• you need stealthy or evasive execution - commands are run plainly and are easy to observe
• you require cloud-native or containerized deployment without virtualization

Facets

cli-tool · maturity maintenance

security simulation workflow-automation cli parser security penetration-testing developer-tools python windows self-hosted adversarial-simulation mitre-attack purple-team red-team detection-testing vagrant celery redis virtualbox infosec yaml-actions host-based-instrumentation security-preparedness automation linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="uber-common/metta")