VECTR Logo

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. VECTR provides the ability to create assessment groups, which consist of a collection of Campaigns and supporting Test Cases to simulate adversary threats. Campaigns can be broad and span activities across the kill chain, from initial compromise to privilege escalation and lateral movement and so on, or can be narrow in scope to focus on specific detection layers, tools, and infrastructure. VECTR is designed to promote full transparency between offense and defense, encourage training between team members, and improve detection & prevention success rates across the environment.

VECTR is focused on common indicators of attack and behaviors that may be carried out by any number of threat actor groups, with varying objectives and levels of sophistication. VECTR can also be used to replicate the step-by-step TTPs associated with specific groups and malware campaigns, however its primary purpose is to replicate attacker behaviors that span multiple threat actor groups and malware campaigns, past, present and future. VECTR is meant to be used over time with targeted campaigns, iteration, and measurable enhancements to both red team skills and blue team detection capabilities. Ultimately the goal of VECTR is to make a network resilient to all but the most sophisticated adversaries and insider attacks.

VECTR Heatmap

VECTR Campaign View

VECTR Import Data

VECTR Historical Trending0

Getting Started

See the Install Section for our installation guide

Supported Platforms

Server Operating Systems

  • Ubuntu LTS 16.04/18.04
  • CentOS/RHEL 7

Running VECTR on other operating systems may be possible but is not supported or documented.

Client Browsers

  • Chrome
  • Firefox

Please read instructions carefully for Upgrading a VECTR instance

General

  • Presentation layer built on AngularJS with some Angular Material UI components
  • Support for OAuth 2.0
  • REST API powered by Apache CXF and JAX-RS
  • Support for TLS endpoints (VECTR Community Edition will auto-generate an untrusted self-signed cert or can be supplied with certs)

Documentation

Feature Breakdowns By Release

Review all the latest features per release

How-To-Videos

Check out our How-to Videos for getting started in VECTR

Team

LEAD PROGRAMMERS:

  • Carl Vonderheid
  • Galen Fisher

PROGRAMMERS:

  • Daniel Hong
  • Andrew Scott
  • Patrick Hislop
  • Nick Galante

DevOps Engineering:

  • Paul Spencer

DESIGN & REQUIREMENTS:

  • Phil Wainwright

GRAPHIC DESIGN & MARKETING:

  • Doug Webster

Security Risk Advisors

License

Please see the EULA

Atomic Red LICENSE