Crossbow is perhaps one of the most dangerous defensive programs CSO has ever reviewed. All of the attacks that it can load or create are real, using actual techniques and tactics that have historically broken through cybersecurity defenses at many organizations. Campaigns can be crafted to test individual defenses, such as phishing attacks against employees and IT staff. The main interface of Crossbow most resembles a do-it-yourself malware attack kit, like the kind you might find or purchase on the dark web, but most of those only offer one or two attack methods.”]