EDRmetry Matrix

EDRmetry Matrix

EDRmetry Matrix is a web-based application that allows users to manually explore and create Linux security tests:

  • Web-Based Knowledge Base with a User-Friendly Interface

  • Hundreds of Ready-to-Use Offensive Test Components

  • Matrix style, list-oriented view, and Search bar

  • Editor mode with Admin privileges (your local deployment)

As of today, i.e., 16/09/2025, EDRmetry Matrix contains 368 techniques ready to be launched, and more are in the research & development process.

EDRmetry Linux Matrix For Download / Self-Hosted - Comprehensive Hands-On Attack TTPs Catalog

Buy nowLearn more

1. EDRmetry Overview

  • Introduction
  • What you will get?
  • Goals / What to expect
  • EDRmetry Matrix
  • Virtual Machines / C2
  • EDRmetry Generic Flow
  • Contextual Execution
  • Changelog / Updates

2. EDRmetry Deployment

  • Deploy your EDRmetry Matrix Docker Container
  • Download EDRmetry Matrix JSON Database
  • Import your EDRmetry Matrix JSON Database
  • Provision your TARGET_X VM
  • Provision your KALI_X or C2_X VM
  • Request for HTTPS Hosted Access to EDRmetry Matrix

3. Research and emulation of Linux threats

  • MITRE ATT&CK TACTICS in the Linux Ecosystem
  • Linux Threat Landscape
  • Initial Access - TA0001
  • Discovery - TA0007
  • Execution - TA0002
  • Defense Evasion - TA0005
  • Persistence - TA0003
  • Privilege Escalation - TA0004
  • Exfiltration - TA0010
  • Command and Control - TA0011
  • Lateral Movement - TA0008
  • Credentials Access - TA0006
  • Impact - TA0040
  • Collection - TA0009