# LockBit Emulation Plans

This directory contains the emulation plans for LockBit.

ℹ️ An emulation plan is the primary document used to execute the red team scenario during a purple team operation. The scenario documents in the table below include the red team execution commands, links to source code, ATT&CK techniques leveraged, and CTI reporting pertaining to each scenario step.

Red Team Playbook	CTI Operations Flow	Description
ER6_LockBit_Scenario.md	LockBit_Scenario_Overview.md	This contains the scenario developed to emulate TTPs of LockBit in Round 6 of ATT&CK Evaluations for Enterprise