7layers snake and dagger emblem

Project 7layers

A ransomware adversary simulation framework
for authorized security exercises and
defensive resilience research.

TACTICS TECHNIQUES PROCEDURES

Explore representative MITRE ATT&CK techniques relevant to controlled ransomware emulation and defensive testing.

DISCOVERY

Enumeration of files and directories to understand the target filesystem within an authorized test scope.

VIEW ATT&CK REFERENCE

DISCOVERY

Inspection of running processes to evaluate visibility and process-level detection coverage.

VIEW ATT&CK REFERENCE

IMPACT

Simulates desktop wallpaper defacement to test blue-team detection and incident response.

VIEW ATT&CK REFERENCE

IMPACT

A ransomware impact technique represented only within deliberately controlled exercise datasets and isolated environments.

VIEW ATT&CK REFERENCE

IMPACT / MONITORING-ONLY

Detect and report exposed recovery mechanisms without deleting restore points or altering recovery settings.

VIEW ATT&CK REFERENCE

THREAT ACTOR ANALYSIS

Ransomware research references mapped to MITRE ATT&CK.

RANSOMWARE / G1024

AKIRA

GROUP IDG1024
SOFTWARE IDS1129 / S1194 / S1191
ALSO MAPPEDAKIRA_V2
DOCUMENTED TECHNIQUES01 — 04
01Remote access
02File discovery
03Recovery disruption
04Data encryption

ATT&CK REFERENCES

29 TECHNIQUES
T1531 T1560.001 T1059.001 T1486 T1213.002 T1685 T1482 T1567.002 T1133 T1657 T1036.005 T1027.001 T1219 T1021.001 T1018 T1558 T1078 T1083 T1490 T1106 T1135 T1057 T1082 T1047 T1543 T1480 T1654 T1489 T1059.003
MITRE ATT&CK VIEW RESEARCH

therustymate/7layers

A controlled ransomware emulation framework for adversary simulation, red team operations, and detection engineering.