Systems and methods for attack simulation on a production network

A system for controlled execution of a malicious behavior between multiple different components in a production network to test at least a portion of a security system of the production network, the system comprising:

• a server configured to identify:
• a packet capture (PCAP) file to use for providing instructions for controlled execution of malicious behavior on a plurality of different components of a production network and
• a first attack to execute against a first device of a plurality of different components, a second attack to execute against a second device of the plurality of different components, and a third attack to execute against a network component of the plurality of different components intermediary to the first end point device and the second device;
• wherein the server is configured, based on at least the PCAP file, to communicate a first set of instructions to a first pair of attack and target nodes in the production network to initiate the malicious behavior of the PCAP file against the first device, a second set of instructions to a second pair of attack and target nodes in the production network to initiate the malicious behavior of the PCAP file against the second device, and a third set of instructions to a third pair of attack and target nodes in the production network to initiate the malicious behavior of the PCAP file against the network component intermediary to the first device and the second device;
• and
• wherein the server is configured to aggregate results of each of the first attack, the second attack, and the third attack to provide an aggregated view of the malicious behavior between the first device and the second device via the network component.