DataDog/stratus-red-team

Stratus Red Team is an adversary emulation tool that provides granular, self-contained attack technique simulations for cloud environments.

The tool addresses the challenge of testing cloud security defenses by enabling security teams to safely execute realistic attack scenarios. It works by packaging individual offensive techniques as discrete, executable units that can be run against cloud infrastructure. Each technique is self-contained, meaning it includes all necessary setup and cleanup logic, allowing teams to simulate specific attack paths without requiring deep expertise in cloud attack mechanics. The techniques are mapped to the MITRE ATT&CK framework, helping teams understand which real-world adversary behaviors they are testing.

Stratus Red Team suits organizations running workloads on AWS, Azure, or Google Cloud who want to validate their detection and response capabilities. It is particularly valuable for detection engineers building cloud security monitoring, purple teams conducting internal security assessments, and security teams that need to verify their incident response procedures work in cloud contexts. The tool is positioned as the cloud equivalent of Atomic Red Team, bringing that established approach to cloud-native attack simulation. Teams should adopt it if they need repeatable, documented ways to test specific cloud attack techniques without building custom attack scripts from scratch.

The project maintains a steady stream of new attack techniques being added to its library. Development activity shows consistent engagement with community contributions and integration of feedback. The tool is distributed as a self-contained Go binary with multiple installation options including Homebrew, pre-built binaries for Linux, Windows, and macOS, and Docker images, making it accessible across different development environments. The project maintains comprehensive documentation at its dedicated website, including technique listings and getting-started guides.