APTSimulator
A Windows Batch script toolset that simulates Advanced Persistent Threat (APT) attack indicators to test security monitoring and detection capabilities.
What is APTSimulator?
APTSimulator is a Windows-based tool that simulates Advanced Persistent Threat (APT) attack behaviors to test security monitoring, endpoint detection, and incident response capabilities. It executes a curated set of malicious activities—such as LSASS dumping, web shell deployment, and persistence mechanisms—generating realistic indicators of compromise without requiring complex setup.
Security professionals, SOC analysts, and red teams who need to validate detection rules, assess security tool effectiveness, or prepare forensic training environments on Windows systems.
Unlike heavier adversary simulation platforms, APTSimulator is a lightweight, dependency-free Batch script that delivers realistic APT tradecraft in under a minute, making it ideal for quick proofs-of-concept and detection gap analysis.
Overview
A toolset to make a system look as if it was the victim of an APT attack
Use Cases
Best For
- Testing endpoint detection and response (EDR) tools for APT-like activities
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
