AttackMate Evaluation Data

Log data and network traffic data sets collected during AttackMate evaluations. The data sets cover three scenarios: Privilege Escalation Information Gathering (tcpdump) Lateral Movement Each scenario has been implemented and tested with AttackMate and MITRE Caldera. Playbooks can be found in the respective directories: AttackMate Playbooks in /attacker/configs/ .yml Execution logs in /attacker/logs/attackmate.json MITRE Caldera Execution logs in /attacker/logs/ .json Atomic Red Team Playbooks in /target/configs/ .yaml Execution logs in /target/logs/atomic_results.log If you use the dataset, please cite the following publication: Landauer, M., Hotwagner, W., Boenke, T., Skopik, F., & Wurzenberger, M. (2026). AttackMate: Realistic Emulation and Automation of Cyber Attack Scenarios Across the Kill Chain. arXiv preprint arXiv:2601.14108. [PDF]