AttackMate Evaluation Data

Log data and network traffic data sets collected during AttackMate evaluations.

The data sets cover three scenarios:

• Privilege Escalation
• Information Gathering (tcpdump)
• Lateral Movement

Each scenario has been implemented and tested with AttackMate and MITRE Caldera. Playbooks can be found in the respective directories:

• AttackMate
  • Playbooks in <scenario>/attacker/configs/<scenario>.yml
  • Execution logs in <scenario>/attacker/logs/attackmate.json
• MITRE Caldera
  • Execution logs in <scenario>/attacker/logs/<scenario>.json
• Atomic Red Team
  • Playbooks in <scenario>/target/configs/<technique>.yaml
  • Execution logs in <scenario>/target/logs/atomic_results.log

If you use the dataset, please cite the following publication:

Landauer, M., Hotwagner, W., Boenke, T., Skopik, F., & Wurzenberger, M. (2026). AttackMate: Realistic Emulation and Automation of Cyber Attack Scenarios Across the Kill Chain. arXiv preprint arXiv:2601.14108. [PDF]