In recent years, cyberattacks targeting cloud applications have significantly increased in both frequency and financial damage. To help secure cloud deployments, different vendors, including Cisco, have started proposing Cloud Native Application Protection Platforms. One of the most advanced features of these platforms is the automatic detection of threats based on behavior analysis and telemetry collection from different sources. In this context, the ability of automatically generating realistic workload on cloud applications becomes paramount for the development, enhancement, and testing of these data-driven functionalities. For this purpose, a system able to emulate a significant number of legitimate users and a malicious actor is required.