Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events…