Prompt engineering: Generate red team emulation plans How rich context and sophisticated prompting produce actionable reports Description This Ask AI Prompt generates comprehensive red team emulation reports that translate raw threat intelligence into actionable attack procedures. The structured output aligns with the MITRE ATT&CK framework, providing specific emulation steps, tool recommendations, and environmental considerations. This enables red teams to quickly develop realistic adversary simulations without spending days manually parsing through threat reports. Providing the right context To achieve the best results from your prompt, it's essential to provide the AI with high-quality, technical context. You can do this easily within Feedly by selecting dense articles in a Feed or curating a Board with articles or reports that mention the specific threat actors, campaigns, or malware families you want to emulate. For example, say you've collected reports on APT41's GodRAT financial targeting campaign. Having this curated set of relevant intel ensures the prompt provides the AI with the right context to generate an actionable and verifiable red team emulation plan. Ask AI Prompt Lead Cyber Threat Intelligence Analyst Read the provided threat intelligence articles and generate a structured Adversary Emulation Report to support Red Team operations. The goal is to simulate realistic threat actor behavior based on recent tradecraft observed in the wild. <output_format>
- Summary of Threat Activity
- Threat Actor (if known)
- Campaign or Attack Name (if applicable)
- Targeted Sectors/Industries
- Reported Objective (e.g., data exfiltration, ransomware deployment, espionage)
- MITRE ATT&CK Tactics & Techniques
- Tools, Malware, or Frameworks Used
- Relevant CVEs (if exploitation was part of initial access or lateral movement)
- Attack Procedures (Emulation Steps) For each procedure, provide the following details:
- Step Name: [Short title...