01 / CONTEXT
Challenge & context
Connecting authorized attack simulation to monitoring signals and response in a test environment.
02 / APPROACH
Solution approach
The repository documents Wazuh and Velociraptor integration through Streamlit; unverified detection percentages are omitted.
03 / DOCUMENTED CAPABILITIES
What the available evidence supports
- MITRE ATT&CK technique simulation
- Wazuh alert monitoring
- Response integration and PDF reporting