Appearance
Warning
MACAT may not work properly if you do not follow all instructions including adding a Windows Defender exception.
Atomic Red Team content and MITRE Enteprise ATT&CK data may be quarantined on download, and your installation will be broken.
Installation Steps for Windows
- Download the latest version of MACAT for Windows from the official website or GitHub releases page.
- Note that it's easiest to run MACAT with a Defender folder exception and your endpoint tools in detect-only or passive mode. If you don't create a folder exception, it's likely that Defender will quarantine Atomic Red Team content and possibly the MITRE Attack Framework json file. This will break MACAT's content sync. I'm investigating creating a version that ships with this content prepopulated, but it's not ready yet.
- To add a Windows Defender exception, go to Windows Settings > Virus & Threat Protection > Virus & Threat Protection settings [Manage Settings] > Scroll down to Add / Remove Exclusions > Add Exclusion for MACAT's install directory.
- Install to your chosen location like
C:\MACAT - Run MACAT