<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Purple Team Assessment

## atomic-red-team — ATT&CK technique execution

```bash
# Execute specific tests
Invoke-AtomicTest TECHNIQUE_ID -TestNumbers 1,2

# Check prerequisites
Invoke-AtomicTest TECHNIQUE_ID -GetPrereqs

# Clean up after test
Invoke-AtomicTest TECHNIQUE_ID -Cleanup

```

## sigma — Detection rule format and conversion

```bash
# Convert to Splunk
sigma convert -t splunk -p splunk_cim rule.yml

# Convert to Elastic
sigma convert -t elastic -p ecs_windows rule.yml

```

## vectr — Purple team tracking platform

```bash
# Create assessment
POST /api/assessments

# Log test case result
POST /api/test-cases

```
