Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Small and highly portable detection tests based on MITRE's ATT&CK.
Automated Adversary Emulation Platform
Tools and Techniques for Red Team / Penetration Testing
A repository of sysmon configuration modules
Windows Events Attack Samples
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
Web app that provides basic navigation and annotation of ATT&CK matrices
An Active Defense and EDR software to empower Blue Teams
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
Utilities for MITRE™ ATT&CK
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
Actionable analytics designed to combat threats
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
A Linux Auditd rule set mapped to MITRE's Attack Framework
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
Add a description, image, and links to the mitre-attack topic page so that developers can more easily learn about it.
To associate your repository with the mitre-attack topic, visit your repo's landing page and select "manage topics."