Product scope and boundaries

Declared network evidence without offensive execution.

NetMetria-X Community generates deterministic network evidence for detection validation. It is built to produce explainable datasets, not to execute attacks or operate infrastructure.

What it is

A deterministic network-evidence dataset generator

Scenario evidenceThe generated PCAP represents declared network-observable behavior for a dataset scenario.
Detection validation inputReviewers use the bundle to test sensors, parsers, detections, dashboards, and analyst workflows.
Ground-truth contextThe dataset includes supporting context so reviewers understand what the generated traffic represents.

What it is not

Boundaries that prevent product confusion

Not malware executionNo implants, payload execution, shells, droppers, or malicious tooling.
Not live C2 infrastructureNo operator control, callbacks, live tasking, command servers, or command clients.
Not endpoint emulationNo process trees, registry changes, shell history, endpoint state, or operating-system runtime behavior.
Not a replay toolIt generates deterministic datasets. It does not replay captured attacker traffic.
Not a cyber rangeIt does not provide live hosts, adversary emulation, defensive infrastructure, scoring, or exercise orchestration.
Not network injectionIt creates files for review. It does not transmit packets into production, lab, or customer networks.

Community preview scope

Clean scenario traffic, not mixed enterprise background traffic

Current Community preview datasets are intentionally clean. They contain generated ATT&CK-aligned network evidence for the selected scenario without unrelated background enterprise traffic.

This is an MVP scope decision, not a claim that real networks are clean. The first reviewer bundles are designed to make the generated behavior easier to inspect, label, and validate.

Background browsing traffic, unrelated service chatter, user activity noise, and larger mixed-traffic datasets are outside the current Community preview scope.

Included nowGenerated network evidence tied to the selected ATT&CK-aligned scenario.
Not included nowAmbient enterprise traffic, unrelated user browsing, general service noise, or synthetic background chatter.
Why this mattersReviewers can focus on PCAP realism, labeling, ground-truth context, and workflow usefulness without sorting through unrelated traffic.

Review the product honestly

The boundary is part of the value

NetMetria-X should be judged on deterministic packet evidence, protocol plausibility, ATT&CK alignment, and ground-truth usefulness. It should not be judged as a breach simulator or live attack platform.