Thremulation Station: the automated threat emulation range

Government and Education

Aug 26, 2021, 7:00 – 8:00 PM


Elastic Stack

About this event

Thremulation (“Threat Emulation”) Station is an approachable and small-scale cyber threat emulation and detection range, built entirely with open-source projects, and of course - the full Elastic Stack.

This range is deployed and managed, on Windows, macOS, or Linux, using an automated script that will allow for junior and advanced threat hunters use and maintain the platform without a deep engineering background. The range can be run from a single system and assists security teams to train in both offensive and defensive cyber tactics leveraging:

* Elasticsearch, Kibana, Beats, and the Elastic Endpoint Agent (w/Security and Windows integrations)

* HashiCorp’s Vagrant

* Red Canary’s Atomic Red Team

* MITRE’s Caldera

This session will cover the project overview, deployment, operation, and a few demonstrations hunting for live intrusions.


  • Ariana Aguilar


    Community Organizer

  • Arlan Parry


    Community Organizer

  • Monique Vandamme-Wildt


Contact Us