#

mitre-attack

Here are 130 public repositories matching this topic...

redcanaryco / atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

mitre mitre-attack

Updated Mar 23, 2022
PowerShell

kubescape

armosec / kubescape

Open

proposal: consider make result metrics colorful for `% RISK-SCORE` by passing --color flag

8

Dentrax commented Jan 18, 2022

For example;

if % RISK-SCORE == 0% then make text color green
if % RISK-SCORE >= 30% then make text color yellow
if % RISK-SCORE >= 70% then make text color red
if % RISK-SCORE == 100% then make background color red
if % RISK-SCORE == 100% then make background color red
if % RISK-SCORE == skipped then make _backg

Read more

feature good first issue open for contribution

caldera

mitre / caldera

Automated Adversary Emulation Platform

hacking cybersecurity mitre red-team security-automation security-testing mitre-attack adversary-emulation caldera mitre-corporation

Updated Mar 23, 2022
Python

olafhartong / sysmon-modular

Sponsor

Open

Modular File Management vs Single Config File Management

1

kingk789 commented Feb 3, 2020

I was wondering the benefit of using Modular File Management vs Single Config File Management? Why do you consider it easier to use multiple files and then compile? Trying to figure out what the best case is for my use case. Thanks. #

Read more

good first issue question

sbousseaden / EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

dfir dataset threat-hunting winlogbeat mitre-attack evtx windows-security detection-engineering

Updated Feb 19, 2022
HTML

Certified-Kubernetes-Security-Specialist

walidshaari / Certified-Kubernetes-Security-Specialist

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

Updated Mar 3, 2022
AGS Script

mitre-attack / attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

cybersecurity cti mitre-attack cyber-threat-intelligence mitre-corporation

Updated Mar 4, 2022
TypeScript

BLUESPAWN

ION28 / BLUESPAWN

Sponsor

An Active Defense and EDR software to empower Blue Teams

windows security anti-virus threat-hunting security-tools blue-team edr mitre-attack active-defense

Updated Feb 23, 2022
C++

olafhartong / ThreatHunting

Sponsor

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

splunk dfir threat-hunting mitre-attack

Updated Nov 18, 2021

nshalabi / ATTACK-Tools

Utilities for MITRE™ ATT&CK

mitre redteaming redteam mitre-attack adversary-emulation

Updated Dec 1, 2020
HTML

Incident-Playbook

austinsonger / Incident-Playbook

Sponsor

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

catalog incident-response playbook cybersecurity mitre incident-management incidents contributions-welcome mitre-attack contributors-welcome cybersecurity-playbook

Updated Dec 6, 2021

sentinel-attack

BlueTeamLabs / sentinel-attack

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

azure detection logging cybersecurity sysmon threat-hunting siem security-tools blue-team mitre-attack workbooks sysmon-config terraform-azure kql azure-sentinel

Updated Apr 27, 2021
HCL

DataDog / stratus-red-team

☁️

⚡ Granular, Actionable Adversary Emulation for the Cloud

aws security cloud-security mitre-attack adversary-emulation threat-detection purple-team detection-engineering cloud-native-security

Updated Mar 21, 2022
Go

atomic-threat-coverage

atc-project / atomic-threat-coverage

Actionable analytics designed to combat threats

threat-model mitre-attack threatintelligence threathunting incidentresponse threatdetection

Updated Jan 27, 2022
Python

bfuzzy / auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

linux threat-hunting auditd attack-detection mitre-attack

Updated Jul 8, 2020

Shuffle

frikky / Shuffle

Sponsor

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

security integrations automation discord openapi orchestration cybersecurity shuffle agplv3 hacktoberfest orchestrator security-automation soar orchestrator-gui workflow-editor mitre-attack security-orchestrator

Updated Mar 20, 2022
JavaScript

center-for-threat-informed-defense / adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

cybersecurity red-team ctid mitre-attack adversary-emulation cyber-threat-intelligence threat-informed-defense

Updated Feb 1, 2022
C

ion-storm / sysmon-config

Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing

graylog logging dfir sysmon threat-hunting threat-sharing threatintel netsec sysinternals graylog-plugin threat-analysis threat-intelligence mitre-attack

Updated Feb 20, 2019
Batchfile

mitre-attack / attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

python cybersecurity cti mitre-attack cyber-threat-intelligence mitre-corporation

Updated Oct 18, 2021
Python

atc-react

atc-project / atc-react

A knowledge base of actionable Incident Response techniques

incident-response dfir thehive mitre-attack response-playbooks amitt

Updated Dec 23, 2021
Python

mitre-attack / attack-website

MITRE ATT&CK Website

cybersecurity cti mitre-attack cyber-threat-intelligence mitre-corporation

Updated Mar 23, 2022
Python

olafhartong / ATTACKdatamap

Sponsor

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

dfir threat-hunting siem mitre-attack threat-detection

Updated Nov 3, 2020
PowerShell

center-for-threat-informed-defense / attack-control-framework-mappings

Security control framework mappings to MITRE ATT&CK provide a critically important resource for organizations to assess their security control coverage against real-world threats and provide a bridge for integrating ATT&CK-based threat information into the risk management process.

cybersecurity cti risk-management nist800-53 ctid mitre-attack cyber-threat-intelligence security-controls threat-informed-defense

Updated Mar 8, 2022
Python

Elemental-attack / Elemental

Elemental - An ATT&CK Threat Library

attack-detection threat-intelligence attack-defense mitre-attack atomicredteam sigma-rules

Updated Feb 10, 2022
HTML

sbousseaden / PCAP-ATTACK

PCAP Samples for Different Post Exploitation Techniques

detection threat-hunting pcapng pcap-files mitre-attack

Updated Apr 29, 2021

n0dec / MalwLess

Test Blue Team detections without running any attack.

powershell dfir sysmon siem hacktoberfest blueteam redteam mitre-attack

Updated Oct 11, 2021
C#

redcanaryco / chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

linux security elf mitre security-testing mitre-attack adversary-simulation

Updated Feb 3, 2022
C

Kirtar22 / Litmus_Test

Detecting ATT&CK techniques & tactics for Linux

incident-response red-team blue-team mitre-attack defensive-security security-operations threathunting linux-hunting

Updated Oct 1, 2020
Roff

vulnrepo

kac89 / vulnrepo

VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted. Complete templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, AES encryption, Nmap/Nessus/Burp/OpenVAS issues import, Jira export, TXT/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, Security report builder.

Updated Feb 26, 2022
TypeScript

center-for-threat-informed-defense / attack-flow

ATT&CK Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

cybersecurity ctid mitre-attack cyber-threat-intelligence

Updated Mar 21, 2022
Vue

Improve this page

Add a description, image, and links to the mitre-attack topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the mitre-attack topic, visit your repo's landing page and select "manage topics."