I have demoed RedTeamSimmer at the Black Hat USA 2026 Arsenal. I first built it as lab tooling for my DEF CON training, and it has since grown into an open-source project of its own.
Atomic Red Team is great, but running it at scale means remembering PowerShell syntax, chasing prerequisites on each machine and piecing the results together afterwards. RedTeamSimmer puts a web dashboard in front of it, with a Flask server, small Go agents on the Windows endpoints, the ATT&CK catalog to pick techniques from, and live output for each run.
For defenders, every technique is matched against Sigma, Splunk and Elastic rules, so you can see straight away whether something should have fired. It also identifies more than 60 AV and EDR products on the targets, and comes with emulation plans for APT28, APT3, APT41, FIN7, Lazarus Group and Wizard Spider.