## Adversary Emulation

Rather than "Generic Hacking", we emulate specific Threat Groups.

### Why?
*   If you are a Bank, you care about **Carbanak**.
*   If you are a Hospital, you care about **Ryuk**.

### Tools
1.  **Atomic Red Team (Red Canary)**: A library of simple scripts to test one technique.
    *   `atomic-red-team.exe T1003` -> Runs a safe mimikatz command.
2.  **CALDERA (MITRE)**: Automated adversary emulation platform.
    *   Build a "Profile" (e.g., APT29).
    *   Click "Start".
    *   Caldera agents connect to C2 and execute the APT29 commands automatically.

### The Value
It proves resilience against *relevant* threats.
"We know we can stop script kiddies. But can we stop the group that hacked our competitor last week?"