Purple-Team-Automation
Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.
Details
- External ID
- 1386123925
- Source
- GITHUB
- Company
- —
- Product
- Purple-Team-Automation
- Website domain
- github.com
- Launched
- Sept. 24, 2026
- Cohort
- —
- Upvotes
- 45
- Upvotes percentile
- 0.8022674865488086
- Tags
- active-directory, adversary-emulation, attack-simulation, caldera, detection-engineering, mitre-attack, purple-team, siem, soc, threat-hunting
- Fetched at
- Sept. 28, 2026, 5:02 p.m.
- Updated at
- Sept. 28, 2026, 5:02 p.m.
Enrichment
- Theme
- ai cybersecurity and penetration testing
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- adversary emulation tool for active directory detection validation
- Manually corrected
- False
Could you build this?
Partial Orchestrating MITRE Caldera runs, mapping to ATT&CK matrices, and evaluating Sigma rules can be vibe-coded, but deploying and managing a realistic Active Directory lab with robust telemetry pipelines requires specialized enterprise security administration.
What it would actually take: A production implementation requires Infrastructure-as-Code (Terraform, Vagrant, or Ansible) to provision Active Directory Domain Controllers and victim endpoints configured with Sysmon, Windows Event Forwarding, and a SIEM like Splunk or Elasticsearch. A Python orchestration service connects to Caldera's REST API to trigger adversary emulation techniques, monitors log ingestion, and tests pySigma detection logic against telemetry. Building this requires deep expertise in enterprise Windows security, detection engineering, and purple-team testing frameworks.
Competitors
Other products that read as similar to this one — 1072 launches clear the similarity bar, closest 8 shown.
Attention rank: #188 of 1073 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 328 days after the earliest competitor.
- GhostShell · github · 2026-09-19 · 12 upvotes · similarity 0.58
- PentestPi · github · 2026-09-09 · 15 upvotes · similarity 0.57
- CyberGuard · github · 2026-09-17 · 50 upvotes · similarity 0.56
- Corgea: Agentic Pentesting · yc · 2026-06-24 · 18 upvotes · similarity 0.56
- heimdall-pentest · github · 2026-09-14 · 67 upvotes · similarity 0.55
- Lynceus · github · 2026-09-26 · 21 upvotes · similarity 0.52
- adeskills · github · 2026-09-27 · 69 upvotes · similarity 0.51
- Nightcrawler · hn · 2026-08-03 · 120 upvotes · similarity 0.51
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.