endgameinc/RTA

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1095 stars · 218 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Red Team Automation (RTA) is a Python framework of scripts that emulate malicious tradecraft modeled after the MITRE ATT&CK matrix, letting blue teams test their detection capabilities. It includes over 50 tactic-generating scripts plus a compiled binary for activities like process injection and beacon simulation.

Use cases

• test my EDR detection rules against MITRE ATT&CK techniques
• simulate malicious tradecraft on a test host
• validate blue team alerting for attack tactics
• emulate process injection and beaconing for detection engineering
• run adversary emulation scripts mapped to ATT&CK

When to choose

• you are a blue team or detection engineer validating coverage against ATT&CK techniques
• you want lightweight Python scripts rather than a full adversary emulation platform
• you need to generate realistic telemetry for tuning security products

When to avoid

• you need a full-featured red team operations platform with C2 infrastructure
• you require actively maintained tooling - the project has not seen releases since 2019 and depends on Python 2.7
• you want stealthy offensive tooling for real engagements rather than detection testing

Facets

framework · maturity maintenance

security penetration-testing cli security penetration-testing developer-tools windows python cli red-team mitre-attack detection-testing adversary-emulation blue-team linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="endgameinc/RTA")