Shorten your detection engineering feedback loops with Grimoire

The report announces Grimoire, an Apache 2.0 open-source tool by Datadog that accelerates cloud detection engineering by detonating common AWS attack techniques (via Stratus Red Team or an interactive AWS CLI shell) and automatically correlating and exporting the exact CloudTrail events they generate using a unique user-agent identifier. Written in Go, Grimoire reduces context switching, supports a growing catalog of 38 AWS techniques, integrates with Stratus Red Team’s documentation to expose detonation logs, and offers simple installation via go install or Homebrew, with automated cleanup after tests.