Small and highly portable detection tests based on MITRE's ATT&CK.

Scalable Automated Adversary Emulation Platform

Windows Events Attack Samples

Web app that provides basic navigation and annotation of ATT&CK matrices

Utilities for MITRE™ ATT&CK

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

An Active Defense and EDR software to empower Blue Teams

A Linux Auditd rule set mapped to MITRE's Attack Framework

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

Actionable analytics designed to combat threats

Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing

Online resources that will help you prepare for taking the CNCF/Linux Foundation CKS 2020 "Kubernetes Certified Security Specialist" Certification exam. with time, This is not likely the comprehensive up to date list - please make a pull request if there something that should be added here.

Shuffle: A general purpose security automation platform platform. We focus on accessibility for all.

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Elemental - An ATT&CK Threat Library

Scripts and a (future) library to improve users' interactions with the ATT&CK content

Test Blue Team detections without running any attack.

MITRE ATT&CK Website

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

A knowledge base of actionable Incident Response techniques

Detecting ATT&CK techniques & tactics for Linux

A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.

PCAP Samples for Different Post Exploitation Techniques

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)

Open Source - Common Findings DataBase (JSON & MD)

attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage

Tool to predict attacker groups from the techniques and software used