# Scattered Spider Emulation Plans

This directory contains the emulations for Scattered Spider.

ℹ️ An emulation plan is the primary document used to execute the red team scenario during a purple team operation.

The scenario documents in the table below include the red team execution commands, links to source code, ATT&CK techniques leveraged, and CTI reporting pertaining to each scenario step.

Red Team Playbook	CTI Overview	Description
Scattered Spider Emulation Plan	Scattered Spider Scenario Overview	This contains the scenario developed to emulate TTPs of Scattered Spider in the Enterprise 2025 ATT&CK Evaluations
Protections Test 1 Scenario	-	This contains the Protections Test 1 scenario developed to emulate TTPs of Scattered Spider in the Enterprise 2025 ATT&CK Evaluations
Protections Test 2 Scenario	-	This contains the Protections Test 2 scenario developed to emulate TTPs of Scattered Spider in the Enterprise 2025 ATT&CK Evaluations
Protections Test 3 Scenario	-	This contains the Protections Test 3 scenario developed to emulate TTPs of Scattered Spider in the Enterprise 2025 ATT&CK Evaluations
Protections Test 6 Scenario	-	This contains the Protections Test 6 noise scenario developed to evaluate false positives in Enterprise 2025 ATT&CK Evaluations
Protections Test 7 Scenario	-	This contains the Protections Test 7 scenario developed to emulate cloud targeting TTPs of Scattered Spider in the Enterprise 2025 ATT&CK Evaluations